Terraform Templates

This repository is a collection of useful Terraform templates that I've come across.

I might throw in some additional code using Packer, Ansible, and Shell scripts for running user data.

I'll focus on a lot of security hardening configurations (networking, firewalls, vpn, etc).

Security Implications

You always want to keep the following files and directories from being version controlled, and should add them to a .gitignore file:

$ vim .gitignore 

.terraform
*.tfstate
*.tfstate.backup
*.backup
terraform.tfstate.backup

If you're working in a team based environment, you want to keep these files stored on a secured (encrypted/permissions) S3 bucket, or some other type of access-based system, such as Hashicorp Vault, etc.

Useful commands

some useful commands here

Notes

Just some notes on various thoughts related to infrastructure design and development.

Load Balancers: You can use Amazon's ELB or use Nginx to handle load balancing between the EC2 instances you're using.

State File Storage: Since state files contain secrets, you should not put them in a public or private git repository. Instead you should use remote storage, such as Amazon S3.

Current Issues

• Having difficulties setting up remote state storage on S3. Potential workaround is using Terragrunt.