86 lines
2.0 KiB
Terraform
86 lines
2.0 KiB
Terraform
|
# Specify the provider and access details
|
||
|
|
provider "aws" {
|
||
|
|
region = "${var.aws_region}"
|
||
|
|
}
|
||
|
|
|
||
|
|
# Our default security group to access
|
||
|
|
# the instances over SSH and HTTP
|
||
|
|
resource "aws_security_group" "default" {
|
||
|
|
name = "terraform_example"
|
||
|
|
description = "Used in the terraform"
|
||
|
|
|
||
|
|
# SSH access from anywhere
|
||
|
|
ingress {
|
||
|
|
from_port = 22
|
||
|
|
to_port = 22
|
||
|
|
protocol = "tcp"
|
||
|
|
cidr_blocks = ["0.0.0.0/0"]
|
||
|
|
}
|
||
|
|
|
||
|
|
# HTTP access from anywhere
|
||
|
|
ingress {
|
||
|
|
from_port = 80
|
||
|
|
to_port = 80
|
||
|
|
protocol = "tcp"
|
||
|
|
cidr_blocks = ["0.0.0.0/0"]
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
resource "aws_elb" "web" {
|
||
|
|
name = "terraform-example-elb"
|
||
|
|
|
||
|
|
# The same availability zone as our instance
|
||
|
|
availability_zones = ["${aws_instance.web.availability_zone}"]
|
||
|
|
|
||
|
|
listener {
|
||
|
|
instance_port = 80
|
||
|
|
instance_protocol = "http"
|
||
|
|
lb_port = 80
|
||
|
|
lb_protocol = "http"
|
||
|
|
}
|
||
|
|
|
||
|
|
# The instance is registered automatically
|
||
|
|
instances = ["${aws_instance.web.id}"]
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
resource "aws_instance" "web" {
|
||
|
|
# The connection block tells our provisioner how to
|
||
|
|
# communicate with the resource (instance)
|
||
|
|
connection {
|
||
|
|
# The default username for our AMI
|
||
|
|
user = "ubuntu"
|
||
|
|
|
||
|
|
# The path to your keyfile
|
||
|
|
key_file = "${var.key_path}"
|
||
|
|
}
|
||
|
|
|
||
|
|
instance_type = "m1.small"
|
||
|
|
|
||
|
|
# Lookup the correct AMI based on the region
|
||
|
|
# we specified
|
||
|
|
ami = "${lookup(var.aws_amis, var.aws_region)}"
|
||
|
|
|
||
|
|
# The name of our SSH keypair you've created and downloaded
|
||
|
|
# from the AWS console.
|
||
|
|
#
|
||
|
|
# https://console.aws.amazon.com/ec2/v2/home?region=us-west-2#KeyPairs:
|
||
|
|
#
|
||
|
|
key_name = "${var.key_name}"
|
||
|
|
|
||
|
|
# Our Security group to allow HTTP and SSH access
|
||
|
|
security_groups = ["${aws_security_group.default.name}"]
|
||
|
|
|
||
|
|
# We run a remote provisioner on the instance after creating it.
|
||
|
|
# In this case, we just install nginx and start it. By default,
|
||
|
|
# this should be on port 80
|
||
|
|
provisioner "remote-exec" {
|
||
|
|
inline = [
|
||
|
|
"sudo apt-get -y update",
|
||
|
|
"sudo apt-get -y install nginx",
|
||
|
|
"sudo service nginx start"
|
||
|
|
]
|
||
|
|
}
|
||
|
|
}
|