Moving remaining s3 configuration to its own folder
This commit is contained in:
		
							parent
							
								
									9bd6cbd3e3
								
							
						
					
					
						commit
						da379f20cb
					
				@ -1,24 +0,0 @@
 | 
			
		||||
plan=out.plan
 | 
			
		||||
 | 
			
		||||
SHELL := /bin/bash
 | 
			
		||||
 | 
			
		||||
$(plan): *.tf
 | 
			
		||||
	source secrets/set-env.sh && terraform plan -input=false -out $(plan)
 | 
			
		||||
 | 
			
		||||
push: build
 | 
			
		||||
	source secrets/set-env.sh && terraform apply $(plan)
 | 
			
		||||
 | 
			
		||||
refresh:
 | 
			
		||||
	source secrets/set-env.sh && terraform apply -refresh-only
 | 
			
		||||
 | 
			
		||||
test:
 | 
			
		||||
	terraform validate
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
rip:
 | 
			
		||||
	source secrets/set-env.sh && terraform destroy
 | 
			
		||||
 | 
			
		||||
clean:
 | 
			
		||||
	rm -f $(plan)
 | 
			
		||||
 | 
			
		||||
.PHONY: test build clean push rip
 | 
			
		||||
@ -1,12 +0,0 @@
 | 
			
		||||
data "aws_vpc" "athens" {
 | 
			
		||||
  id = var.vpc_id
 | 
			
		||||
}
 | 
			
		||||
 | 
			
		||||
data "aws_subnet" "delphi" {
 | 
			
		||||
  id = "subnet-0a1943f26e4338cf6"
 | 
			
		||||
}
 | 
			
		||||
 | 
			
		||||
data "aws_subnet" "crete" {
 | 
			
		||||
  id = "subnet-09302319a6678643f"
 | 
			
		||||
}
 | 
			
		||||
 | 
			
		||||
@ -1,13 +0,0 @@
 | 
			
		||||
locals {
 | 
			
		||||
  # ECR 
 | 
			
		||||
  repos = [
 | 
			
		||||
    "reverse-proxy",
 | 
			
		||||
  ]
 | 
			
		||||
  buckets = [
 | 
			
		||||
    "shockrah.xyz",
 | 
			
		||||
    "resume.shockrah.xyz"
 | 
			
		||||
  ]
 | 
			
		||||
  nginx_name = "${var.athens_prefix}-nginx-static-content"
 | 
			
		||||
  nginx_hp_check_interval = 300
 | 
			
		||||
}
 | 
			
		||||
 | 
			
		||||
							
								
								
									
										24
									
								
								infra/s3/Makefile
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										24
									
								
								infra/s3/Makefile
									
									
									
									
									
										Normal file
									
								
							@ -0,0 +1,24 @@
 | 
			
		||||
plan=out.plan
 | 
			
		||||
 | 
			
		||||
SHELL := /bin/bash
 | 
			
		||||
 | 
			
		||||
$(plan): *.tf
 | 
			
		||||
	source ../secrets/set-env.sh && terraform plan -input=false -out $(plan)
 | 
			
		||||
 | 
			
		||||
push: build
 | 
			
		||||
	source ../secrets/set-env.sh && terraform apply $(plan)
 | 
			
		||||
 | 
			
		||||
refresh:
 | 
			
		||||
	source ../secrets/set-env.sh && terraform apply -refresh-only
 | 
			
		||||
 | 
			
		||||
test:
 | 
			
		||||
	terraform validate
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
rip:
 | 
			
		||||
	source ../secrets/set-env.sh && terraform destroy
 | 
			
		||||
 | 
			
		||||
clean:
 | 
			
		||||
	rm -f $(plan)
 | 
			
		||||
 | 
			
		||||
.PHONY: test build clean push rip
 | 
			
		||||
@ -2,7 +2,7 @@ terraform {
 | 
			
		||||
  required_version = ">= 0.13"
 | 
			
		||||
  backend "s3" {
 | 
			
		||||
      bucket  = "project-athens"
 | 
			
		||||
      key     = "infra/state/build.tfstate"
 | 
			
		||||
      key     = "infra/s3/state/build.tfstate"
 | 
			
		||||
      region  = "us-west-1"
 | 
			
		||||
      encrypt = true
 | 
			
		||||
  }
 | 
			
		||||
							
								
								
									
										7
									
								
								infra/s3/local.tf
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										7
									
								
								infra/s3/local.tf
									
									
									
									
									
										Normal file
									
								
							@ -0,0 +1,7 @@
 | 
			
		||||
locals {
 | 
			
		||||
  buckets = [
 | 
			
		||||
    "shockrah.xyz",
 | 
			
		||||
    "resume.shockrah.xyz"
 | 
			
		||||
  ]
 | 
			
		||||
}
 | 
			
		||||
 | 
			
		||||
							
								
								
									
										17
									
								
								infra/s3/s3.tf
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										17
									
								
								infra/s3/s3.tf
									
									
									
									
									
										Normal file
									
								
							@ -0,0 +1,17 @@
 | 
			
		||||
resource "aws_s3_bucket" "static-content" {
 | 
			
		||||
  for_each = {
 | 
			
		||||
    for idx, record in local.buckets:
 | 
			
		||||
      idx => record
 | 
			
		||||
  }
 | 
			
		||||
  
 | 
			
		||||
  bucket = each.value
 | 
			
		||||
 | 
			
		||||
  tags = {
 | 
			
		||||
    Name = each.value
 | 
			
		||||
    Description = "Static content"
 | 
			
		||||
  }
 | 
			
		||||
}
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
@ -1,17 +1,3 @@
 | 
			
		||||
resource "aws_s3_bucket" "static-content" {
 | 
			
		||||
  for_each = {
 | 
			
		||||
    for idx, record in local.buckets:
 | 
			
		||||
      idx => record
 | 
			
		||||
  }
 | 
			
		||||
  
 | 
			
		||||
  bucket = each.value
 | 
			
		||||
 | 
			
		||||
  tags = {
 | 
			
		||||
    Name = each.value
 | 
			
		||||
    Description = "Static content"
 | 
			
		||||
  }
 | 
			
		||||
}
 | 
			
		||||
 | 
			
		||||
##################################################################
 | 
			
		||||
# Below are the acl components for each bucket to make them public
 | 
			
		||||
##################################################################
 | 
			
		||||
@ -42,8 +28,6 @@ resource "aws_s3_bucket_public_access_block" "site" {
 | 
			
		||||
  ignore_public_acls  = false
 | 
			
		||||
  restrict_public_buckets = false
 | 
			
		||||
}
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
# Set a policy on the bucket to allow reads from anywhere
 | 
			
		||||
resource "aws_s3_bucket_policy" "site" {
 | 
			
		||||
  for_each = toset(local.buckets)
 | 
			
		||||
@ -66,3 +50,4 @@ resource "aws_s3_bucket_policy" "site" {
 | 
			
		||||
}
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
		Loading…
	
		Reference in New Issue
	
	Block a user