vpc

AWS create VPC using Terraform

Provisioned resources in this example

1. VPC
2. IGW for Public subnet internet access
3. Elastic IP for NAT Gateway
4. NAT Gateway for Private subnet internet access
5. Route table for public subnet
6. Route table for private subnet
7. private subnet
8. public subnet
9. sg to expose ssh(22) , http(80) in public subnet
10. sg to expose ssh(22) , psql(5432) in private subnet
11. 2 ec2 instances one for public and otherwise

terraform

terraform will create

1. VPC with 10.0.0.0/16 cidr block
2. IGW
3. Elastic IP
4. NAT Gateway
5. public subnet with 10.0.1.0/24 cidr block
6. private subnet with 10.0.2.0/24 cidr block
7. route table with IGW associte with public subnet
8. route table with NAT Gateway associte with Private subnet
9. t2.micro ec2 instance with root_block_device 10Gb gp2 in public subnet
10. t2.micro ec2 instance with root_block_device 10Gb gp2 in private subnet
11. security group with
12. ingress
    1. tcp port 22 ssh
    2. tcp port 5432 psql
13. egress
    1. expose anywhere
14. security group with
15. ingress
    1. tcp port 22 ssh
    2. tcp port 80 http
16. egress
    1. expose anywhere

terraform apply

ansible

1. update all the hosts
2. install nginx in bastion host (public)
3. install postgres in private host
   1. install postgres using apt
   2. configure pg_hba.conf file to allow connections
   3. configure postgresql.conf to listen on all interfaces to be accessible by other ec2 instances
   4. create database , database user and previleges
4. deploy linkin web app in docker container

ansible-playbook main.yml -v -i hosts

ansible config is loaded from the current directory ssh key and bastion redirects are loaded from the ssh config and ansible config

todo : use vars for database url , names ect. setup promethous nad grafana setup postgres data in separate ebs https://www.digitalocean.com/community/tutorials/how-to-move-a-postgresql-data-directory-to-a-new-location-on-ubuntu-18-04

setup crontab to backup pg https://docs.ansible.com/ansible/latest/collections/ansible/builtin/cron_module.htmll