hello world website 2.0
7 | 8 | -------------------------------------------------------------------------------- /packer/scripts/cleanup.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | sudo pip uninstall -y -r scripts/requirements.txt 4 | sudo rm -rf ansible 5 | sudo rm -rf scripts -------------------------------------------------------------------------------- /packer/scripts/prepare.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | sudo pip install -r scripts/requirements.txt 4 | -------------------------------------------------------------------------------- /packer/scripts/requirements.txt: -------------------------------------------------------------------------------- 1 | ansible>=2.4.3.0 2 | -------------------------------------------------------------------------------- /packer/template_ami.json: -------------------------------------------------------------------------------- 1 | { 2 | "variables": { 3 | "aws_access_key": "", 4 | "aws_secret_key": "" 5 | }, 6 | "builders": [ 7 | { 8 | "type": "amazon-ebs", 9 | "access_key": "{{user `aws_access_key`}}", 10 | "secret_key": "{{user `aws_secret_key`}}", 11 | "region": "eu-west-1", 12 | "source_ami_filter": { 13 | "filters": { 14 | "virtualization-type": "hvm", 15 | "name": "amzn-ami-hvm-*", 16 | "root-device-type": "ebs" 17 | }, 18 | "owners": ["137112412989"], 19 | "most_recent": true 20 | }, 21 | "instance_type": "t2.micro", 22 | "ssh_username": "ec2-user", 23 | "ami_name": "packer-ami {{timestamp}}", 24 | "tags": { 25 | "Name": "webserver", 26 | "Project": "testing" 27 | } 28 | } 29 | ], 30 | "provisioners": [ 31 | { 32 | "type": "file", 33 | "source": "scripts", 34 | "destination": "/home/ec2-user/" 35 | }, 36 | { 37 | "type": "shell", 38 | "scripts": [ 39 | "scripts/prepare.sh" 40 | ] 41 | }, 42 | { 43 | "type": "file", 44 | "source": "ansible", 45 | "destination": "/home/ec2-user/" 46 | }, 47 | { 48 | "type": "ansible-local", 49 | "playbook_file": "ansible/provision_host.yml", 50 | "playbook_dir": "ansible" 51 | }, 52 | { 53 | "type": "shell", 54 | "scripts": [ 55 | "scripts/cleanup.sh" 56 | ] 57 | } 58 | ] 59 | } 60 | 61 | -------------------------------------------------------------------------------- /terraform/aws-demo.tf: -------------------------------------------------------------------------------- 1 | provider "aws" { 2 | region = "eu-west-1" 3 | } 4 | 5 | module "alb" { 6 | source = "modules/alb" 7 | environment = "${var.environment}" 8 | vpc_id = "${module.vpc.id}" 9 | public_subnet_ids = "${module.public_subnet.ids}" 10 | } 11 | 12 | module "ec2" { 13 | source = "modules/ec2" 14 | environment = "${var.environment}" 15 | vpc_id = "${module.vpc.id}" 16 | private_subnet_ids = "${module.private_subnet.ids}" 17 | max_size = "${var.max_size}" 18 | min_size = "${var.min_size}" 19 | instance_type = "${var.instance_type}" 20 | target_group = "${module.alb.target_group}" 21 | key_name = "${aws_key_pair.key.key_name}" 22 | sg_bastion = "${module.bastion.sg_id}" 23 | } 24 | 25 | module "vpc" { 26 | source = "modules/vpc" 27 | cidr = "${var.vpc_cidr}" 28 | environment = "${var.environment}" 29 | } 30 | 31 | module "private_subnet" { 32 | source = "modules/private_subnet" 33 | name = "${var.environment}_private_subnet" 34 | environment = "${var.environment}" 35 | vpc_id = "${module.vpc.id}" 36 | nat_gateway_id = "${module.nat.ids}" 37 | cidrs = "${var.private_subnet_cidrs}" 38 | availability_zones = "${var.availability_zones}" 39 | } 40 | 41 | module "public_subnet" { 42 | source = "modules/public_subnet" 43 | name = "${var.environment}_public_subnet" 44 | environment = "${var.environment}" 45 | vpc_id = "${module.vpc.id}" 46 | igw_id = "${module.vpc.igw}" 47 | cidrs = "${var.public_subnet_cidrs}" 48 | availability_zones = "${var.availability_zones}" 49 | } 50 | 51 | module "nat" { 52 | source = "modules/nat_gateway" 53 | vpc_id = "${module.vpc.id}" 54 | subnet_ids = "${module.public_subnet.ids}" 55 | subnet_count = "${length(var.public_subnet_cidrs)}" 56 | } 57 | 58 | module "bastion" { 59 | source = "modules/bastion" 60 | environment = "${var.environment}" 61 | vpc_id = "${module.vpc.id}" 62 | public_subnet_ids = "${module.public_subnet.ids}" 63 | instance_type = "${var.instance_type}" 64 | key_name = "${aws_key_pair.key.key_name}" 65 | } 66 | 67 | resource "aws_key_pair" "key" { 68 | key_name = "key-${var.environment}" 69 | public_key = "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjbmI/eB0DDI4w3vh43Ha4FXVQEHF0U1lAfCN/pow2NlCZoRuINJfoc48xgFNXBNDBZWuRXER3R+hV4H0GlsM3CEc8J0V7ggbCC87spXcdUcoNvvBfA4SXvLWz88tYf04vgtFl8Mwe0kF9wiWvs+gDefOAJ59iWK/0FQY5wD7hyZtksX33dfrcpjm62idC9QtWivbygin7FOBOBgLINOdW9OYDbVoTbplUtmAN+qiS2LoipuZ/jUBhyePU1+BawIuG7f57lI9x0Xl0oNBj+SQt/W0IVCrMy+2N3G1hVIQ8SFG/7FDPr+yy5c8rqahQw2eLrVFadunjxrY/5RSciZy/ notme@fake" 70 | } 71 | 72 | variable "vpc_cidr" {} 73 | variable "environment" {} 74 | variable "max_size" {} 75 | variable "min_size" {} 76 | variable "instance_type" {} 77 | 78 | variable "private_subnet_cidrs" { 79 | type = "list" 80 | } 81 | 82 | variable "public_subnet_cidrs" { 83 | type = "list" 84 | } 85 | 86 | variable "availability_zones" { 87 | type = "list" 88 | } 89 | -------------------------------------------------------------------------------- /terraform/aws-demo.tfvars: -------------------------------------------------------------------------------- 1 | vpc_cidr = "10.172.0.0/16" 2 | 3 | environment = "dev" 4 | 5 | public_subnet_cidrs = ["10.172.1.0/24", "10.172.2.0/24"] 6 | 7 | private_subnet_cidrs = ["10.172.81.0/24", "10.172.82.0/24"] 8 | 9 | availability_zones = ["eu-west-1a", "eu-west-1b"] 10 | 11 | max_size = 4 12 | 13 | min_size = 2 14 | 15 | instance_type = "t2.micro" 16 | -------------------------------------------------------------------------------- /terraform/aws_fake_key: -------------------------------------------------------------------------------- 1 | -----BEGIN RSA PRIVATE KEY----- 2 | MIIEpAIBAAKCAQEAo25iP3gdAwyOMN74eNx2uBV1UBBxdFNZQHwjf6aMNjZQmaEb 3 | iDSX6HOPMYBTVwTQwWVrkVxEd0foVeB9BpbDNwhHPCdFe4IGwgvO7KV3HVHKDb7w 4 | XwOEl7y1s/PLWH9OL4LRZfDMHtJBfcIlr7PoA3nzgCefYliv9BUGOcA+4cmbZLF9 5 | 93X63KY5utonQvULVor28oIp+xTgTgYCyDTnVvTmA21aE26ZVLZgDfqokti6Iqbm 6 | f41AYcnj1NfgWsCLhu3+e5SPcdF5dKDQY/kkLf1tCFQqzMvtjdxtYVSEPEhRv+xQ 7 | z6/ssuXPK6moUMNni61RWnbp48a2P+UUnImcvwIDAQABAoIBAHeE6mTwOodYT0R+ 8 | S8hXspq9VqXO4KnpqoP2RR+9dRzQa/FuWOwrSky89iOFbW1eICzPNvN/PrLc65Si 9 | L8z5xJoie7YKIk5IsRiH+jQmbg4LGnEjCjbyI620XE3WJQf7Ufp8+RZMG3sO2MZX 10 | jagJMcwZC3LVh0ItCcC+/2aMqXAFDSv+SJmUXKwQkcgFejH0U3HfN1TfhVxIHTZY 11 | NAVSDnYpFudRhgC0OviuwG8CmGFM9Mb+hRjJATG9FgOutSQ9drZbLZgTk+wZePCu 12 | gh6LWhzd6COnvsAvpgggCCKdhqqnSM8GSI3omxHD3LvhXe1OU7o/AlEofsrL3kdn 13 | UeImUIECgYEA1PjBFNa1ZRhBbWvODTtgZoyg2HAkIp9jL1GWJD7JLNUs9wgdyyOf 14 | N5wZOX/tw9oJDnMkp364DYWAERfRQGXE9zMGo+yFh1CjUL+3s3aLqYOWLwJPbB16 15 | Yp4jISov/bswilbE5MoXwAe6fgZ2sCesvN9qW0hjJnntBpF9o/JrB+cCgYEAxHNQ 16 | JVCggOmKoFXuTnaaYi5cPyI6rbBQg3xt7wtKNRmw9cYQ4vns45ivTiKxy3J9mFml 17 | IqI8rpgZaRqUvjHRQpsrJXhG5vjmLGmqJ9bsC07ft17bPY2G7Ec/K/t11c/FaxQf 18 | 51IImAnS1F9zhqHHvMmlTZUTH2UtsG7VYSU5yWkCgYEArCz7NBStC7EDXCn2qH3j 19 | XqS8eJ6YqCEBd8TWxDC6RXOGaaR3Kb5/vt6FChZhq5+/CJ6P+JWayNuwAKGnuw9L 20 | oKnw6V+TSCUqE2MbaYwiNwY5yYFtojNmuQmtzucja1cFVCH4BhtX/hiBbddd5uX8 21 | Yamhe3DXL8kMle3TjFK0susCgYBEZSVVKIII/8ZM1j4WwUI0xpFFRcSKLiWJ8atQ 22 | m2ylmiE7IE9Gxt7Lyp/WI0wlWeISRbuxmCxqWPgX2LJKmYuSlfVqoTqGNcflVJBy 23 | OGiL81T+QZ8xCfIclx2OUYkP/Ltt8V6+KZhmXp0xZV4SVIb22nmbzjgPKSnEEIJn 24 | xQ8eaQKBgQCqfJs+rg/m+2TEYJoVam3vnS7jikV+u/3csrPT/2pzdn7ho0COF32q 25 | 4os7H0C/3GFUB4oAgcEYSKVAi3pjSOvOP4R+Kx4gJjLXzg1FQCA6dEEZ/ppVlMc1 26 | FTfgX7ufPtJL/HeP7xJNwVIpPRemHRApzr46Zs1U3OPFqwezJLozUw== 27 | -----END RSA PRIVATE KEY----- 28 | -------------------------------------------------------------------------------- /terraform/modules/alb/main.tf: -------------------------------------------------------------------------------- 1 | resource "aws_alb" "default" { 2 | name = "${var.alb_name}" 3 | internal = false 4 | load_balancer_type = "application" 5 | security_groups = ["${aws_security_group.alb.id}"] 6 | subnets = ["${var.public_subnet_ids}"] 7 | 8 | tags { 9 | Environment = "${var.environment}" 10 | } 11 | } 12 | 13 | resource "aws_alb_target_group" "default" { 14 | name = "tf-lab-tg" 15 | port = "80" 16 | protocol = "HTTP" 17 | vpc_id = "${var.vpc_id}" 18 | 19 | health_check { 20 | healthy_threshold = 2 21 | interval = 15 22 | path = "/" 23 | timeout = 10 24 | unhealthy_threshold = 2 25 | } 26 | } 27 | 28 | resource "aws_alb_listener" "alb_listener" { 29 | load_balancer_arn = "${aws_alb.default.arn}" 30 | port = "80" 31 | protocol = "HTTP" 32 | 33 | default_action { 34 | target_group_arn = "${aws_alb_target_group.default.arn}" 35 | type = "forward" 36 | } 37 | } 38 | 39 | # elb security group to access the ELB over HTTP 40 | resource "aws_security_group" "alb" { 41 | name = "elb_sg" 42 | description = "managed by terraform - ALB SG" 43 | vpc_id = "${var.vpc_id}" 44 | 45 | # HTTP access from anywhere 46 | ingress { 47 | from_port = 80 48 | to_port = 80 49 | protocol = "tcp" 50 | cidr_blocks = ["${var.allow_cidr_block}"] 51 | } 52 | 53 | # outbound internet access 54 | egress { 55 | from_port = 0 56 | to_port = 0 57 | protocol = "-1" 58 | cidr_blocks = ["0.0.0.0/0"] 59 | } 60 | } 61 | -------------------------------------------------------------------------------- /terraform/modules/alb/outputs.tf: -------------------------------------------------------------------------------- 1 | output "dns" { 2 | value = "${aws_alb.default.dns_name}" 3 | } 4 | 5 | output "target_group" { 6 | value = "${aws_alb_target_group.default.arn}" 7 | } 8 | -------------------------------------------------------------------------------- /terraform/modules/alb/variables.tf: -------------------------------------------------------------------------------- 1 | variable "alb_name" { 2 | default = "default" 3 | description = "The name of the loadbalancer" 4 | } 5 | 6 | variable "environment" { 7 | description = "The name of the environment" 8 | } 9 | 10 | variable "vpc_id" { 11 | description = "The VPC id" 12 | } 13 | 14 | variable "allow_cidr_block" { 15 | default = "0.0.0.0/0" 16 | description = "Specify cird block that is allowd to acces the LoadBalancer" 17 | } 18 | 19 | variable "public_subnet_ids" { 20 | type = "list" 21 | description = "List of public subnet IDs" 22 | } 23 | -------------------------------------------------------------------------------- /terraform/modules/bastion/data.tf: -------------------------------------------------------------------------------- 1 | data "aws_ami" "ubuntu" { 2 | most_recent = true 3 | 4 | filter { 5 | name = "name" 6 | values = ["ubuntu/images/hvm-ssd/ubuntu-xenial-16.04-amd64-server-*"] 7 | } 8 | 9 | filter { 10 | name = "virtualization-type" 11 | values = ["hvm"] 12 | } 13 | 14 | owners = ["099720109477"] # Canonical 15 | } 16 | -------------------------------------------------------------------------------- /terraform/modules/bastion/main.tf: -------------------------------------------------------------------------------- 1 | resource "aws_instance" "bastion" { 2 | ami = "${data.aws_ami.ubuntu.id}" 3 | instance_type = "${var.instance_type}" 4 | vpc_security_group_ids = ["${aws_security_group.bastion.id}"] 5 | key_name = "${var.key_name}" 6 | subnet_id = "${var.public_subnet_ids[0]}" 7 | associate_public_ip_address = true 8 | 9 | tags { 10 | Environment = "${var.environment}" 11 | } 12 | } 13 | 14 | # Create security group to access instances 15 | resource "aws_security_group" "bastion" { 16 | name = "sg_bastion" 17 | description = "security group for bastion host" 18 | vpc_id = "${var.vpc_id}" 19 | 20 | # SSH access 21 | ingress { 22 | from_port = 22 23 | to_port = 22 24 | protocol = "tcp" 25 | cidr_blocks = ["0.0.0.0/0"] 26 | } 27 | 28 | # Outbound internet access 29 | egress { 30 | from_port = 0 31 | to_port = 0 32 | protocol = "-1" # allow all protocols 33 | cidr_blocks = ["0.0.0.0/0"] 34 | } 35 | } 36 | -------------------------------------------------------------------------------- /terraform/modules/bastion/outputs.tf: -------------------------------------------------------------------------------- 1 | output "sg_id" { 2 | value = "${aws_security_group.bastion.id}" 3 | } 4 | 5 | output "dns" { 6 | value = "${aws_instance.bastion.public_dns}" 7 | } 8 | -------------------------------------------------------------------------------- /terraform/modules/bastion/variables.tf: -------------------------------------------------------------------------------- 1 | variable "environment" { 2 | description = "The name of the environment" 3 | } 4 | 5 | variable "vpc_id" { 6 | description = "VPC id to place to subnet into" 7 | } 8 | 9 | variable "instance_type" { 10 | description = "EC2 instance type" 11 | } 12 | 13 | variable "key_name" { 14 | description = "SSH key name to be used" 15 | } 16 | 17 | variable "public_subnet_ids" { 18 | type = "list" 19 | description = "List of public subnet IDs" 20 | } 21 | -------------------------------------------------------------------------------- /terraform/modules/ec2/data.tf: -------------------------------------------------------------------------------- 1 | data "aws_ami" "webserver" { 2 | filter { 3 | name = "state" 4 | values = ["available"] 5 | } 6 | 7 | filter { 8 | name = "tag:Name" 9 | values = ["webserver"] 10 | } 11 | 12 | most_recent = true 13 | } -------------------------------------------------------------------------------- /terraform/modules/ec2/main.tf: -------------------------------------------------------------------------------- 1 | resource "aws_launch_configuration" "launch_config" { 2 | image_id = "${data.aws_ami.webserver.id}" 3 | instance_type = "${var.instance_type}" 4 | security_groups = ["${aws_security_group.web.id}"] 5 | associate_public_ip_address = false 6 | key_name = "${var.key_name}" 7 | 8 | lifecycle { 9 | create_before_destroy = true 10 | } 11 | } 12 | 13 | resource "aws_autoscaling_group" "asg" { 14 | name = "asg-app - ${aws_launch_configuration.launch_config.name}" 15 | launch_configuration = "${aws_launch_configuration.launch_config.name}" 16 | min_size = "${var.min_size}" 17 | max_size = "${var.max_size}" 18 | target_group_arns = ["${var.target_group}"] 19 | vpc_zone_identifier = ["${var.private_subnet_ids}"] 20 | 21 | depends_on = ["aws_launch_configuration.launch_config"] 22 | 23 | lifecycle { 24 | create_before_destroy = true 25 | } 26 | } 27 | 28 | # Create security group to access instances 29 | resource "aws_security_group" "web" { 30 | name = "sg_webserver" 31 | description = "security group for web servers" 32 | vpc_id = "${var.vpc_id}" 33 | 34 | # HTTP access 35 | ingress { 36 | from_port = 80 37 | to_port = 80 38 | protocol = "tcp" 39 | cidr_blocks = ["0.0.0.0/0"] 40 | } 41 | 42 | ingress { 43 | from_port = 22 44 | to_port = 22 45 | protocol = "tcp" 46 | security_groups = ["${var.sg_bastion}"] 47 | } 48 | 49 | # Outbound internet access 50 | egress { 51 | from_port = 0 52 | to_port = 0 53 | protocol = "-1" # allow all protocols 54 | cidr_blocks = ["0.0.0.0/0"] 55 | } 56 | } 57 | -------------------------------------------------------------------------------- /terraform/modules/ec2/variables.tf: -------------------------------------------------------------------------------- 1 | variable "environment" { 2 | description = "The name of the environment" 3 | } 4 | 5 | variable "vpc_id" { 6 | description = "VPC id to place to subnet into" 7 | } 8 | 9 | variable "instance_type" { 10 | description = "EC2 instance type" 11 | } 12 | 13 | variable "key_name" { 14 | description = "SSH key name to be used" 15 | } 16 | 17 | variable "sg_bastion" { 18 | description = "Bastion host Security Group ID" 19 | } 20 | 21 | variable "max_size" { 22 | description = "Max EC2 instance count in the auto-scaling group" 23 | } 24 | 25 | variable "min_size" { 26 | description = "Min EC2 instance count in the auto-scaling group" 27 | } 28 | 29 | variable "private_subnet_ids" { 30 | type = "list" 31 | description = "List of private subnet IDs" 32 | } 33 | 34 | variable "target_group" { 35 | description = "Target group ARN" 36 | } 37 | -------------------------------------------------------------------------------- /terraform/modules/nat_gateway/main.tf: -------------------------------------------------------------------------------- 1 | resource "aws_nat_gateway" "nat_gw" { 2 | allocation_id = "${element(aws_eip.nat.*.id, count.index)}" 3 | subnet_id = "${element(var.subnet_ids, count.index)}" 4 | count = "${var.subnet_count}" 5 | } 6 | 7 | resource "aws_eip" "nat" { 8 | vpc = true 9 | count = "${var.subnet_count}" 10 | } 11 | -------------------------------------------------------------------------------- /terraform/modules/nat_gateway/outputs.tf: -------------------------------------------------------------------------------- 1 | output "ids" { 2 | value = "${aws_nat_gateway.nat_gw.*.id}" 3 | } 4 | -------------------------------------------------------------------------------- /terraform/modules/nat_gateway/variables.tf: -------------------------------------------------------------------------------- 1 | variable "subnet_ids" { 2 | type = "list" 3 | description = "List of subnets in which to place the NAT Gateway" 4 | } 5 | 6 | variable "subnet_count" { 7 | description = "Size of the subnet_ids. This needs to be provided because: value of 'count' cannot be computed" 8 | } 9 | 10 | variable "vpc_id" { 11 | description = "VPC id to place to subnet into" 12 | } 13 | -------------------------------------------------------------------------------- /terraform/modules/private_subnet/main.tf: -------------------------------------------------------------------------------- 1 | resource "aws_subnet" "subnet" { 2 | vpc_id = "${var.vpc_id}" 3 | cidr_block = "${element(var.cidrs, count.index)}" 4 | availability_zone = "${element(var.availability_zones, count.index)}" 5 | count = "${length(var.cidrs)}" 6 | 7 | tags { 8 | Name = "${var.name}_${element(var.availability_zones, count.index)}" 9 | Environment = "${var.environment}" 10 | } 11 | } 12 | 13 | resource "aws_route_table" "table" { 14 | vpc_id = "${var.vpc_id}" 15 | count = "${length(var.cidrs)}" 16 | 17 | tags { 18 | Name = "${var.name}_${element(var.availability_zones, count.index)}" 19 | Environment = "${var.environment}" 20 | } 21 | } 22 | 23 | resource "aws_route" "private_nat_route" { 24 | count = "${length(var.cidrs)}" 25 | route_table_id = "${element(aws_route_table.table.*.id, count.index)}" 26 | nat_gateway_id = "${element(var.nat_gateway_id, count.index)}" 27 | destination_cidr_block = "${var.destination_cidr_block}" 28 | } 29 | 30 | resource "aws_route_table_association" "subnet" { 31 | subnet_id = "${element(aws_subnet.subnet.*.id, count.index)}" 32 | route_table_id = "${element(aws_route_table.table.*.id, count.index)}" 33 | count = "${length(var.cidrs)}" 34 | } 35 | -------------------------------------------------------------------------------- /terraform/modules/private_subnet/outputs.tf: -------------------------------------------------------------------------------- 1 | output "ids" { 2 | value = [ 3 | "${aws_subnet.subnet.*.id}", 4 | ] 5 | } 6 | 7 | output "route_table_ids" { 8 | value = [ 9 | "${aws_route_table.table.*.id}", 10 | ] 11 | } 12 | -------------------------------------------------------------------------------- /terraform/modules/private_subnet/variables.tf: -------------------------------------------------------------------------------- 1 | variable "name" { 2 | description = "Name of the subnet, actual name will be, for example: name_eu-west-1a" 3 | } 4 | 5 | variable "environment" { 6 | description = "The name of the environment" 7 | } 8 | 9 | variable "cidrs" { 10 | type = "list" 11 | description = "List of cidrs, for every avalibility zone you want you need one. Example: 10.0.0.0/24 and 10.0.1.0/24" 12 | } 13 | 14 | variable "destination_cidr_block" { 15 | default = "0.0.0.0/0" 16 | description = "Specify all traffic to be routed either trough Internet Gateway or NAT to access the internet" 17 | } 18 | 19 | variable "availability_zones" { 20 | type = "list" 21 | description = "List of avalibility zones you want. Example: eu-west-1a and eu-west-1b" 22 | } 23 | 24 | variable "vpc_id" { 25 | description = "VPC id to place to subnet into" 26 | } 27 | 28 | variable "nat_gateway_id" { 29 | type = "list" 30 | description = "NAT Gateway id" 31 | } 32 | -------------------------------------------------------------------------------- /terraform/modules/public_subnet/main.tf: -------------------------------------------------------------------------------- 1 | resource "aws_subnet" "subnet" { 2 | vpc_id = "${var.vpc_id}" 3 | cidr_block = "${element(var.cidrs, count.index)}" 4 | availability_zone = "${element(var.availability_zones, count.index)}" 5 | count = "${length(var.cidrs)}" 6 | 7 | tags { 8 | Name = "${var.name}_${element(var.availability_zones, count.index)}" 9 | Environment = "${var.environment}" 10 | } 11 | } 12 | 13 | resource "aws_route_table" "table" { 14 | vpc_id = "${var.vpc_id}" 15 | count = "${length(var.cidrs)}" 16 | 17 | tags { 18 | Name = "${var.name}_${element(var.availability_zones, count.index)}" 19 | Environment = "${var.environment}" 20 | } 21 | } 22 | 23 | resource "aws_route" "public_igw_route" { 24 | count = "${length(var.cidrs)}" 25 | route_table_id = "${element(aws_route_table.table.*.id, count.index)}" 26 | gateway_id = "${var.igw_id}" 27 | destination_cidr_block = "${var.destination_cidr_block}" 28 | } 29 | 30 | resource "aws_route_table_association" "subnet" { 31 | subnet_id = "${element(aws_subnet.subnet.*.id, count.index)}" 32 | route_table_id = "${element(aws_route_table.table.*.id, count.index)}" 33 | count = "${length(var.cidrs)}" 34 | } 35 | -------------------------------------------------------------------------------- /terraform/modules/public_subnet/outputs.tf: -------------------------------------------------------------------------------- 1 | output "ids" { 2 | value = [ 3 | "${aws_subnet.subnet.*.id}", 4 | ] 5 | } 6 | 7 | output "route_table_ids" { 8 | value = [ 9 | "${aws_route_table.table.*.id}", 10 | ] 11 | } 12 | -------------------------------------------------------------------------------- /terraform/modules/public_subnet/variables.tf: -------------------------------------------------------------------------------- 1 | variable "name" { 2 | description = "Name of the subnet, actual name will be, for example: name_eu-west-1a" 3 | } 4 | 5 | variable "environment" { 6 | description = "The name of the environment" 7 | } 8 | 9 | variable "cidrs" { 10 | type = "list" 11 | description = "List of cidrs, for every avalibility zone you want you need one. Example: 10.0.0.0/24 and 10.0.1.0/24" 12 | } 13 | 14 | variable "destination_cidr_block" { 15 | default = "0.0.0.0/0" 16 | description = "Specify all traffic to be routed either trough Internet Gateway or NAT to access the internet" 17 | } 18 | 19 | variable "availability_zones" { 20 | type = "list" 21 | description = "List of avalibility zones you want. Example: eu-west-1a and eu-west-1b" 22 | } 23 | 24 | variable "vpc_id" { 25 | description = "VPC id to place to subnet into" 26 | } 27 | 28 | variable "igw_id" { 29 | description = "IGW id" 30 | } 31 | -------------------------------------------------------------------------------- /terraform/modules/vpc/main.tf: -------------------------------------------------------------------------------- 1 | resource "aws_vpc" "vpc" { 2 | cidr_block = "${var.cidr}" 3 | enable_dns_hostnames = true 4 | 5 | tags { 6 | Name = "${var.environment}" 7 | Environment = "${var.environment}" 8 | } 9 | } 10 | 11 | # Create an internet gateway 12 | resource "aws_internet_gateway" "igw" { 13 | vpc_id = "${aws_vpc.vpc.id}" 14 | 15 | tags { 16 | Environment = "${var.environment}" 17 | } 18 | } 19 | -------------------------------------------------------------------------------- /terraform/modules/vpc/outputs.tf: -------------------------------------------------------------------------------- 1 | output "id" { 2 | value = "${aws_vpc.vpc.id}" 3 | } 4 | 5 | output "igw" { 6 | value = "${aws_internet_gateway.igw.id}" 7 | } 8 | -------------------------------------------------------------------------------- /terraform/modules/vpc/variables.tf: -------------------------------------------------------------------------------- 1 | variable "cidr" { 2 | description = "VPC cidr block. Example: 10.0.0.0/16" 3 | } 4 | 5 | variable "environment" { 6 | description = "The name of the environment" 7 | } 8 | -------------------------------------------------------------------------------- /terraform/outputs.tf: -------------------------------------------------------------------------------- 1 | # Output ALB DNS Name 2 | output "ALB DNS Name" { 3 | value = "${module.alb.dns}" 4 | } 5 | 6 | output "Bastion DNS Name" { 7 | value = "${module.bastion.dns}" 8 | } 9 | -------------------------------------------------------------------------------- /terraform/state.tf: -------------------------------------------------------------------------------- 1 | terraform { 2 | backend "s3" { 3 | bucket = "terraform-remote-state-defo" 4 | key = "terraform-state-packer-aws-with-gitlab.tfstate" 5 | region = "eu-west-1" 6 | } 7 | } 8 | --------------------------------------------------------------------------------