This project contain a group of base Terraform modules that will help you to build the infrastructure you need from your projects. This modules aim to serve as a tool to create individual resources on different providers, they are minimal and focus on each specific resource as an unique element.

Note: If you are looking for a more complex combination of resources and modules we built as well terraform-stack it will give you a stack of resources to speed up the process of creating a new infrastructure.

This project has been highly inspired by the work of others that have decided to share with the community their work, check the resources section for more info.

• Available Modules
• Changelog
• Authors
• License
• Resources

• Compute
  • EC2 Instance
  • ELB HTTPS
• Data
  • Rancheros AMI
  • Ubuntu AMI
• Networking
  • Internet Gateway
  • NAT Gateway
  • Private Subnet
  • Public Subnet
  • Security Group - Custom Group
  • Security Group - ELB HTTPS
  • Security Group - Internal
  • Security Group - Rancher
  • Security Group - RDS Cluster Instance
  • Security Group - SSH
  • VPC
• RDS
  • DB Subnet Group
  • RDS Cluster
  • RDS Cluster Instance

This module creates:

• AWS EC2 Instance
• AWS Key Pair if needed, that will be used by the instance

This module creates an AWS ELB HTTPS

This data module will return an RancherOS AWS AMI ID to populate the ami argument to our instance

This data module will return an Ubuntu AWS AMI ID to populate the ami argument to our instances

Note: If you are using our AWS EC2 Instance module it will try to recreate a new resource every time as the aws_ami could change if a new version is publish, as this one will have a different timestamp even if we are specifying the same architecture, distribution or virtualization type, so or either you use your own aws_instance resource add the the ignore_changes lifecycle argument to not recreate the instance again and then terraform taint the instance to force recreate when you want to change to a new AMI for more info see the following Terraform issue

This module creates an AWS Internet Gateway

This module creates an AWS NAT Gateway, an AWS Route and an AWS EIP to associate with the NAT Gateway

One NAT gateway should be created per supplied public subnet ID. This ensures that regardless of if the subnets reside in different availability zones, there is no risk of connectivity loss, should one AZ go offline.

This modules creates:

• AWS Private Subnet
• AWS NAT Gateway if specified

Usage:

module "private_subnet" {
    source = "github.com/moltin/terraform-modules.git/aws//networking/private_subnet"
}

Note: if not using SSH authentication URL, it's important to notice that there is a dependency with the nat_gateway that needs to be satisfied therefore we need to import the private_subnet from the networking subfolder as shown in the example above using // like aws//networking/private_subnet

This modules create an AWS Public Subnet

This modules create an AWS Security Group without rules to be customized

You will need to add custom rules to your security group

Usage:

module "sg_custom_elb_https" {
    source = "git::ssh://[email protected]/moltin/terraform-modules.git//aws/networking/security_group/sg_custom_group"

    name     = "${var.name}"
    vpc_id   = "${data.terraform_remote_state.network.vpc_id}"

    tags {
        "Cluster"     = "security"
        "Audience"    = "private"
        "Environment" = "${var.environment}"
    }
}

resource "aws_security_group_rule" "authentication" {
    type            = "ingress"
    from_port       = 8000
    to_port         = 8000
    protocol        = "tcp"
    cidr_blocks     = ["${var.vpc_cidr}"]

    security_group_id = "${module.sg_custom.id}"
}

This modules create an AWS Security Group for the Elastic Load Balancer HTTPS

Ports:

• TCP 443 (HTTPS)
• ICMP

This modules create an AWS Security Group to enable internal comms between resources that share this sg

This modules create an AWS Security Group for the internal communication between Rancher HA server nodes

Ports:

• TCP 8080 / self (Rancher HA server nodes)
• TCP 9345 / self (Rancher HA server nodes)

This modules create an AWS Security Group for the RDS Cluster Instance

This modules create an AWS Security Group for SSH

Ports:

• TCP 22 (SSH)

This modules create an AWS VPC

This modules create an AWS RDS DB Subnet

This modules create an AWS RDS Cluster

This modules create an AWS RDS Cluster Instance

• Israel Sotomayor - Initial work - zot24

See also the list of contributors who participated in this project.

This project is licensed under the MIT License - see the LICENSE file for details

• Articles

  • The Segment AWS Stack
  • Terraform Modules for Fun and Profit
  • How to create reusable infrastructure with Terraform modules
  • Infrastructure Packages
  • Terraform: Cloud made easy
  • Terraform, VPC, and why you want a tfstate file per env
  • Rancher HA:
    • Deploying Rancher HA in production with AWS, Terraform, and RancherOS
    • AWS and Rancher: Building a Resilient Stack

• Non directly related but useful

  • Practical VPC Design

• GitHub repositories

  • segmentio/terraform-docs
  • segmentio/stack
  • hashicorp/best-practices
  • terraform-community-modules
  • contino/terraform-learn
  • paybyphone/terraform_aws_private_subnet
  • Rancher HA:
    • cloudnautique/terraform-rancher
    • nextrevision/terraform-rancher-ha-example
    • codesheppard/terraform-rancher-starter-template