example1/main.tf at master · vantzs/example1 · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
# Assign TF Provider
provider "aws" {
  profile    = "default"
  region     = "us-east-1"
}

#resource generate random password for VestaCP Install
  resource "random_password" "password" {
  length = 16
  special = true
  override_special = "_%@"
  }

# Call userdata template
	data "template_file" "user_data" {
	template = "${file("userdata.tpl")}"
}

# Create a new AWS Instance and attach keypair
resource "aws_instance" "vestacp" {
  ami             = "ami-0083662ba17882949"
  instance_type   = "t2.micro"
  key_name        = "vantz-tf-stuff"
  user_data       = "${data.template_file.user_data.template}"
  tags = {
	Name = "Vantz-TF-Test"
	}
}

# Configure VPC
resource "aws_vpc" "vantz-tf-test" {
  cidr_block = "10.0.0.0/24"
  tags = {
  Name = "vantz-tf-stuff"
  }
}

# Configure open ports in SG
resource "aws_security_group" "vantz-tf-test" {
  name        = "allow_http"
  description = "Allow http inbound traffic"
  vpc_id      = "${aws_vpc.vantz-tf-test.id}"

# Inbound SG Settings
  ingress {
    # HTTP (change to whatever ports you need)
    from_port   = 80
    to_port     = 80
    protocol    = "tcp"
    # Please restrict your ingress to only necessary IPs and ports.
    # Opening to 0.0.0.0/0 can lead to security vulnerabilities.
    cidr_blocks = ["75.178.114.217/32"]
  }
    ingress {
    # HTTPS (change to whatever ports you need)
    from_port   = 443
    to_port     = 443
    protocol    = "tcp"
    # Please restrict your ingress to only necessary IPs and ports.
    # Opening to 0.0.0.0/0 can lead to security vulnerabilities.
    cidr_blocks = ["75.178.114.217/32"]
  }
    ingress {
    # VestaCP Management Port (change to whatever ports you need)
    from_port   = 8083
    to_port     = 8083
    protocol    = "tcp"
    # Please restrict your ingress to only necessary IPs and ports.
    # Opening to 0.0.0.0/0 can lead to security vulnerabilities.
    cidr_blocks = ["75.178.114.217/32"]
  }
    ingress {
    # SSH (change to whatever ports you need)
    from_port   = 22
    to_port     = 22
    protocol    = "tcp"
    # Please restrict your ingress to only necessary IPs and ports.
    # Opening to 0.0.0.0/0 can lead to security vulnerabilities.
    cidr_blocks = ["75.178.114.217/32"]
  }

# Outbound SG Settings
  egress {
    from_port       = 0
    to_port         = 0
    protocol        = "-1"
    cidr_blocks     = ["0.0.0.0/0"]
  }
  tags = {
	Name = "Vantz-TF-Test"
	}
}