-
Notifications
You must be signed in to change notification settings - Fork 0
/
alb.tf
56 lines (48 loc) · 1.27 KB
/
alb.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
resource "aws_security_group" "alb" {
name = "${var.prefix}-alb-${var.environment}"
description = "Allow HTTPS inbound traffc"
vpc_id = module.vpc.vpc_id
egress {
from_port = 0
to_port = 0
protocol = "-1"
cidr_blocks = ["0.0.0.0/0"]
}
ingress {
from_port = 443
to_port = 443
protocol = "tcp"
cidr_blocks = ["0.0.0.0/0"]
}
ingress {
from_port = 0
to_port = 0
protocol = "-1"
self = true
}
tags = var.tags
}
module "alb" {
source = "terraform-aws-modules/alb/aws"
version = "~> 8.0"
name = "${var.prefix}-${var.environment}"
load_balancer_type = "application"
vpc_id = module.vpc.vpc_id
subnets = module.vpc.public_subnets
security_groups = [aws_security_group.alb.id]
https_listeners = [
{
"certificate_arn" = var.create_certificate ? aws_acm_certificate.domain_certificate[0].arn : var.existing_certificate_arn
"port" = 443
"ssl_policy" = "ELBSecurityPolicy-TLS13-1-2-2021-06"
},
]
target_groups = [
{
name = "${var.prefix}-default-${var.environment}"
backend_protocol = "HTTP"
backend_port = 80
}
]
tags = var.tags
}