Arvados

a. vm named 'pantograph.lugli.arvadosapi.com' (we can add aliases later)
b. small initial size (t3.medium), 50 gb data disk, encrypted
c. nginx, public ip, set up to be a TLS proxy to local port 3000
d. LE for certs
e. arvados shell node role so we can assign users from arvados

Once it is up the pantograph team will need to log in and compile their service, I'll tell them to run it on port 3000.