120 lines
3.0 KiB
HCL
120 lines
3.0 KiB
HCL
# aws config
|
|
provider "aws" {
|
|
region = var.region
|
|
profile = var.profile
|
|
version = "~> 2.70.0"
|
|
}
|
|
|
|
# tags
|
|
locals {
|
|
tags = {
|
|
"Project" = "strapi-eb"
|
|
"Description" = "Terraform resources for strapi in Elastic Beanstalk"
|
|
}
|
|
}
|
|
|
|
# Network
|
|
|
|
module "vpc" {
|
|
source = "git::https://github.com/cloudposse/terraform-aws-vpc.git?ref=tags/0.14.0"
|
|
stage = var.stage
|
|
name = var.name
|
|
tags = local.tags
|
|
|
|
cidr_block = "172.16.0.0/16"
|
|
enable_default_security_group_with_custom_rules = false
|
|
}
|
|
|
|
module "subnets" {
|
|
source = "git::https://github.com/cloudposse/terraform-aws-dynamic-subnets.git?ref=tags/0.23.0"
|
|
stage = var.stage
|
|
name = var.name
|
|
tags = local.tags
|
|
|
|
availability_zones = ["eu-west-1a", "eu-west-1b", "eu-west-1c"]
|
|
vpc_id = module.vpc.vpc_id
|
|
igw_id = module.vpc.igw_id
|
|
cidr_block = module.vpc.vpc_cidr_block
|
|
nat_gateway_enabled = false
|
|
nat_instance_enabled = false
|
|
}
|
|
|
|
resource "aws_security_group" "ec2_security_group" {
|
|
name = "${var.stage}-${var.name}-ec2_sg"
|
|
description = "Security group assigned to the Elastic Scaling group that is applied to the EC2 instances."
|
|
vpc_id = module.vpc.vpc_id
|
|
tags = local.tags
|
|
|
|
ingress {
|
|
description = "HTTP"
|
|
from_port = 80
|
|
to_port = 80
|
|
protocol = "tcp"
|
|
cidr_blocks = ["0.0.0.0/0"]
|
|
}
|
|
|
|
ingress {
|
|
description = "HTTPS"
|
|
from_port = 443
|
|
to_port = 443
|
|
protocol = "tcp"
|
|
cidr_blocks = ["0.0.0.0/0"]
|
|
}
|
|
|
|
egress {
|
|
description = "Outbound to all"
|
|
from_port = 0
|
|
to_port = 0
|
|
protocol = "-1"
|
|
cidr_blocks = ["0.0.0.0/0"]
|
|
}
|
|
}
|
|
|
|
resource "aws_security_group" "rds_security_group_public" {
|
|
name = "${var.stage}-${var.name}-rds_public_sg"
|
|
description = "Security group for the RDS instance that allows public access from the internet."
|
|
vpc_id = module.vpc.vpc_id
|
|
tags = local.tags
|
|
|
|
ingress {
|
|
description = "Incoming Postgres"
|
|
from_port = 5432
|
|
to_port = 5432
|
|
protocol = "tcp"
|
|
cidr_blocks = ["82.6.205.148/32"]
|
|
}
|
|
}
|
|
|
|
# RDS instance
|
|
|
|
module "rds_instance" {
|
|
source = "git::https://github.com/cloudposse/terraform-aws-rds.git?ref=tags/0.20.0"
|
|
stage = var.stage
|
|
name = var.name
|
|
tags = local.tags
|
|
|
|
allocated_storage = 5
|
|
database_name = "postgres"
|
|
database_user = "mainuser"
|
|
database_password = "password"
|
|
database_port = 5432
|
|
db_parameter_group = "postgres12"
|
|
engine = "postgres"
|
|
engine_version = "12.3"
|
|
instance_class = "db.t2.micro"
|
|
|
|
security_group_ids = [aws_security_group.ec2_security_group.id]
|
|
associate_security_group_ids = [aws_security_group.rds_security_group_public.id]
|
|
subnet_ids = module.subnets.public_subnet_ids
|
|
vpc_id = module.vpc.vpc_id
|
|
publicly_accessible = true
|
|
}
|
|
|
|
# S3 bucket
|
|
|
|
resource "aws_s3_bucket" "static_assets" {
|
|
bucket = "${var.stage}-${var.name}-strapi-uploads"
|
|
acl = "private"
|
|
tags = local.tags
|
|
}
|