forked from pastryer/Pauls-AWS-Dev-Pod
103 lines
2.2 KiB
HCL
103 lines
2.2 KiB
HCL
|
|
|
|
resource "aws_vpc" "sgtm_vpc" {
|
|
cidr_block = var.vpc_cidr
|
|
enable_dns_hostnames = true
|
|
enable_dns_support = true
|
|
|
|
tags = {
|
|
name = "dev"
|
|
}
|
|
}
|
|
|
|
resource "aws_subnet" "sptm_public_subnet" {
|
|
vpc_id = aws_vpc.sgtm_vpc.id
|
|
cidr_block = var.public_cidr
|
|
map_public_ip_on_launch = true
|
|
availability_zone = "us-east-1a"
|
|
|
|
tags = {
|
|
name = "dev-public"
|
|
}
|
|
}
|
|
|
|
resource "aws_internet_gateway" "sgtm_internet_gateway" {
|
|
vpc_id = aws_vpc.sgtm_vpc.id
|
|
|
|
tags = {
|
|
name = "dev-igw"
|
|
}
|
|
}
|
|
|
|
resource "aws_route_table" "sgtm_public_rt" {
|
|
vpc_id = aws_vpc.sgtm_vpc.id
|
|
|
|
tags = {
|
|
name = "dev_public_rt"
|
|
}
|
|
}
|
|
|
|
resource "aws_route" "default_route" {
|
|
route_table_id = aws_route_table.sgtm_public_rt.id
|
|
destination_cidr_block = "0.0.0.0/0"
|
|
gateway_id = aws_internet_gateway.sgtm_internet_gateway.id
|
|
}
|
|
|
|
resource "aws_route_table_association" "sgtm_public_assoc" {
|
|
subnet_id = aws_subnet.sptm_public_subnet.id
|
|
route_table_id = aws_route_table.sgtm_public_rt.id
|
|
}
|
|
|
|
resource "aws_security_group" "sgtm_sg" {
|
|
name = "dev-sg"
|
|
description = "dev security group"
|
|
vpc_id = aws_vpc.sgtm_vpc.id
|
|
|
|
ingress {
|
|
from_port = 0
|
|
to_port = 0
|
|
protocol = "-1"
|
|
cidr_blocks = [var.allowed_ingress_cidr]
|
|
}
|
|
|
|
egress {
|
|
from_port = 0
|
|
to_port = 0
|
|
protocol = "-1"
|
|
cidr_blocks = ["0.0.0.0/0"]
|
|
}
|
|
}
|
|
|
|
resource "tls_private_key" "key" {
|
|
algorithm = var.tls_key_algorithm
|
|
}
|
|
|
|
resource "aws_key_pair" "sgtm_auth" {
|
|
key_name = "${var.name_prefix}-key-${var.name_suffix}"
|
|
public_key = tls_private_key.key.public_key_openssh
|
|
|
|
provisioner "local-exec" {
|
|
command = <<EOF
|
|
echo "${tls_private_key.key.private_key_pem}" > key.pem
|
|
chmod 0600 key.pem
|
|
EOF
|
|
}
|
|
}
|
|
|
|
resource "aws_instance" "dev_node" {
|
|
instance_type = var.instance_type
|
|
ami = data.aws_ami.server_ami.id
|
|
key_name = aws_key_pair.sgtm_auth.id
|
|
vpc_security_group_ids = [aws_security_group.sgtm_sg.id]
|
|
subnet_id = aws_subnet.sptm_public_subnet.id
|
|
user_data = file ("userdata.tpl")
|
|
|
|
root_block_device {
|
|
volume_size = var.volume_size
|
|
}
|
|
|
|
tags = {
|
|
name = "dev-node"
|
|
}
|
|
|
|
} |