shockrah/infra
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

* Opting for ubuntu 21.10

Browse Source 
* Also a new new regarding internet gateway requirement
This commit is contained in:
shockrah 2021-11-25 00:14:03 -08:00
parent 44bb460afc
commit 2962591ef0
2 changed files with 10 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
.gitignore vendored
View File

@ -3,3 +3,7 @@ msg
infra/.terraform infra/.terraform
infra/.terraform.lock.hcl infra/.terraform.lock.hcl
infra/terraform.tfvars infra/terraform.tfvars
infra/keys/
infra/out.plan
infra/terraform.tfstate
infra/terraform.tfstate.backup

16
readme
View File

@ -55,15 +55,15 @@ Gamma - Dev/Ansible host
Crete - Primary Subnet used to host stuff Crete - Primary Subnet used to host stuff
Olympus - [not sure where this fits but doc'd for future]
(Potential) Secondary subnet used to host (bigger) projects
Section 4. Network Layout Section 4. Network Layout
========================= =========================
Crete Crete
Refers to the primary subnet that most services live on. Refers to the primary subnet that most services live on.
Contains its own internet gateway as services here
basically require 24/7 internet access.
> High number of web services
Subnet 10.0.0.128/25 Subnet 10.0.0.128/25
@ -84,13 +84,9 @@ Section 5. Image's Used for Hosting
=================================== ===================================
Primary Image Used Primary Image Used
AMI - Ubuntu 20.04 AMI - Ubuntu Impish 21.10
Rationale - It's the current LTS release so sec patches Rationale - Basically the latest release by cannonical
will come in regularly and has good operability with which I'm kinda just trusting they got things right xd
most of the tools I plan on using anyway. Most services
which are getting containerized rely on Alpine so
as long as Docker is properly updated maintaining
posture on this shouldn't be too bad.
Firewall setup Firewall setup
Most of the firewall setup sits in AWS however they Most of the firewall setup sits in AWS however they