54 lines
1.1 KiB
HCL
54 lines
1.1 KiB
HCL
provider "aws" {
|
|
region = "eu-west-1"
|
|
}
|
|
|
|
resource "aws_security_group" "web_server_sg_tf" {
|
|
name = "web-server-sg-tf"
|
|
description = "Allow HTTP to web server"
|
|
vpc_id = module.vpc.vpc_id
|
|
|
|
ingress {
|
|
description = "SSH ingress"
|
|
from_port = 22
|
|
to_port = 22
|
|
protocol = "tcp"
|
|
cidr_blocks = ["0.0.0.0/0"]
|
|
}
|
|
|
|
ingress {
|
|
description = "HTTP ingress"
|
|
from_port = 80
|
|
to_port = 80
|
|
protocol = "tcp"
|
|
cidr_blocks = ["0.0.0.0/0"]
|
|
}
|
|
|
|
ingress {
|
|
description = "HTTPS ingress"
|
|
from_port = 443
|
|
to_port = 443
|
|
protocol = "tcp"
|
|
cidr_blocks = ["0.0.0.0/0"]
|
|
}
|
|
|
|
egress {
|
|
from_port = 0
|
|
to_port = 0
|
|
protocol = "-1"
|
|
cidr_blocks = ["0.0.0.0/0"]
|
|
}
|
|
}
|
|
|
|
resource "aws_instance" "test_ami" {
|
|
ami = "ami-029b91ed285a24a90"
|
|
instance_type = "t4g.nano"
|
|
associate_public_ip_address = true
|
|
subnet_id = module.vpc.public_subnets[0]
|
|
vpc_security_group_ids = [aws_security_group.web_server_sg_tf.id]
|
|
|
|
user_data = <<-EOF
|
|
#!/bin/bash
|
|
sudo dnf install -y nginx
|
|
sudo systemctl start nginx
|
|
EOF
|
|
}
|