Run Ghost Blog in AWS on ECS, in a cheap way (i.e., no fixed AWS costs)

This is a self-contained app to self-host on ECS. Goals:

• as cheap as possible
  • no load balancer, no autoscaling (this makes it more tricky in some ways)
  • no NAT Gateway
  • using Fargate Spot when possible
• 99% uptime assuming reasonable load
• leverage CloudFront for cheap bandwidth and reducing load

• CloudFront can't point to IP directly
• Ghost has issues with running on port < 1024 on fargate?
• ECS Service Discovery requires using private IPs even if in public zone

• store files in S3
• avoid DNS service discovery?
  • not sure if possible. Docs refer to SRV records
• try to avoid public IP on task?
• API GW
  • try public cloudmap zone with internet integration?
• optional dns alias