Hal Terraform Modules

Infrastructure as Code Terraform modules for hosting Hal in AWS

Hal Frontend Test Infastructure

Getting Started

Requirements

1. Terrafrom

• brew install terraform

2. AWS Account subnets and vpc-id's

This terraform setup is a BYON (Bring your own network) setup and does not create any networking or vpc resources for you. You should have at minimum before this:

• 1 vpc
• 2 public subnets
• 2 private subnets

As such you should make note of the vpc-id subnet-ids you want to place these resources in.

How to use these modules

Each module setups a different piece of Hals infastructure. See the README.md in each module for a description of that modules configuration. These modules should be run in order:

1. iac-bastion
2. iac-frontend
3. iac-database

This is mainly so that you can get the Security Group Id created for each module and pass them to the configuration of subsquent modules. For example you want the bastion host to have access to the databases. If they are run out of order you can go back and add the security group to the allowed_security_groups configuration of other modules and update their infastructure.

Terragrunt Recommendation

Terragrunt is a thin wrapper around terraform that helps keep configuration and module definition seperate. We recommend using terragrunt to manage your hal environments without needing to change this repo. Below is some example terragrunt configuration:

Bastion Host Example

terragrunt = {
  terraform = {
    source = "github.com/hal-platform/terraform-modules//iac-bastion"
  }

  include = {
    path = "${find_in_parent_folders()}"
  }
}

vpc_id = "vpc-xxxxxx"

aws_region = "us-east-2"

prefix = "hal-xxxx"

iac_tags = {
  iac = "terraform"
}

subnet_id = "subnet-yyyyyy"

allowed_ips = ["0.0.0.0/0"]

ssh_key_name = "xxxx-keypair"

instance_type = "t2.micro"

zone_name = "hal.xxxx.zone"

Frontend Example

terragrunt = {
  terraform {
    source = "github.com/hal-platform/terraform-modules//iac-frontend"
  }

  include = {
    path = "${find_in_parent_folders()}"
  }
}

vpc_id = "vpc-xxxxxxx"

aws_region = "us-east-2"

application_name = "yyyyyy"

application_id = "zzzzzzzzzz"

environment_name = "nonprod"

beanstalk_tier = "web"

instance_type = "t2.micro"

subnets_private_instances = ["subnet-xxxxxxx", "subnet-zzzzzzz"]

subnets_public_load_balancer = ["subnet-yyyyyyyy", "subnet-wwwwwww"]

load_balancer_visibility = "external"

load_balancer_allowed_incoming_ip_or_sg = ["0.0.0.0/0"]

ssh_keypair_name = "xxxxxxx"

Database Example

terragrunt = {
  terraform {
    source = "github.com/hal-platform/terraform-modules//iac-database"
  }

  include = {
    path = "${find_in_parent_folders()}"
  }
}

prefix = "bnagi"

vpc_id = "vpc-xxxxxx"

aws_region = "us-east-2"

# RDS
rds_subnet_ids = ["subnet-xxxxxx", "subnet-yyyyyyy"]

rds_instance_type = "db.t2.small"

rds_master_username = "hal"

rds_master_password = "CHANGEME!!!!"

rds_instance_type = "db.r4.large"

rds_backup_retention_days = "14"

rds_allowed_security_groups = ["sg-wwwwwww, "sg-zzzzzzzz"]

# ElastiCache
cache_allowed_security_groups = ["sg-wwwwwww, "sg-zzzzzzzz"]

cache_subnet_ids = ["subnet-ppppppppp"]