Skip to content

Latest commit

 

History

History
84 lines (73 loc) · 5.13 KB

README.md

File metadata and controls

84 lines (73 loc) · 5.13 KB
Raw

Requirements

Name Version
aws ~> 5.0

Usage

Basic usage of this module is as follows:

  module "ec2" {
    source                      = "../module"
    instance_type               = "t3.medium"
    vpc_id                      = "vpc-abcdef123456"
    subnet_id                   = "subnet-abcdef123"
    allow_ingress_ip            = "0.0.0.0/0"
    create_iam_instance_profile = true
    php_version                 = "8.2"
    domain_name                 = "example.com"
    root_block_device = [
      {
        encrypted   = true
        volume_type = "gp3"
        throughput  = 200
        volume_size = 50
      },
    ]
  }

This project was created for 5 minutes ec2 instance setup with installed php, mysql, nginx, backups. To run this project - you need to install terraform

Full working example you can find in terraform/example.com directory. Ajust parameters in main.tf and backend.tf files and run terraform init and terraform apply

After applying the Terraform configuration, an SSH key will be generated and saved in the directory from which you applied the code.

To connect to the server, use the following SSH command, replacing <server_ip> with the IP address of the server:

ssh <server_ip> -l ubuntu -i example.com.pem

After the server created - it will run self-setup ansible script used EC2 user data

Ansible installation:

  • The PHP version to set up can be defined by the php_version parameter. Supported versions include 8.1, 8.2, and 8.3.
  • The php.ini file will be configured to implement basic security changes.
  • MySQL root and user password will be generated automatically, root password will be saved to /root/.my.cnf, user password will be saved to /var/www/vhosts/example.com/index.php.
  • A MySQL backup script will be installed to /root/bin/mysql-maint.sh and added as a cronjob to execute at midnight.
  • An Nginx configuration file will be created at /etc/nginx/conf.d/example.com.conf, and the virtual host will be served from /var/www/vhosts/example.com/.
  • After the autosetup is finished, you can point the DNS of your example.com and www.example.com to the IP address and issue HTTPS certificates by running certbot --nginx.

Debug:

If something was not configured properly - you can review ansible log in /var/log/cloud-init-output.log.

Resources

Name Type
aws_eip.this resource
aws_key_pair.this resource
local_file.cloud_pem resource
tls_private_key.this resource
aws_ami.ubuntu data source
template_file.init data source

Inputs

Name Description Type Default Required
allow_ingress_ip IP address to allow ssh access to string n/a yes
create_iam_instance_profile Determines whether an IAM instance profile is created or to use an existing IAM instance profile bool false no
domain_name Domain name to init instance for string n/a yes
instance_type The instance type string "t3.medium" no
php_version PHP version to install string "8.1" no
root_block_device Root block device parameters any n/a yes
subnet_id VPC subnet id to create the instance in any n/a yes
vpc_id VPC ID to create instance and security group in string n/a yes

Outputs

Name Description
ec2_instance_id EC2 instance ID
ec2_instance_ip EC2 public IP
security_group_id EC2 instance security group ID
ssh_key_name SSH key name