-
Notifications
You must be signed in to change notification settings - Fork 512
/
alb.tf
63 lines (54 loc) · 1.35 KB
/
alb.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
module "acm_alb" {
source = "terraform-aws-modules/acm/aws"
version = "~> v2.0"
domain_name = var.public_alb_domain
zone_id = data.aws_route53_zone.this.zone_id
tags = var.tags
}
resource "aws_security_group" "alb" {
name = "${var.prefix}-alb-${var.environment}"
description = "Allow HTTPS inbound traffc"
vpc_id = module.vpc.vpc_id
egress {
from_port = 0
to_port = 0
protocol = "-1"
cidr_blocks = ["0.0.0.0/0"]
}
ingress {
from_port = 443
to_port = 443
protocol = "tcp"
cidr_blocks = ["0.0.0.0/0"]
}
ingress {
from_port = 0
to_port = 0
protocol = "-1"
self = true
}
tags = var.tags
}
module "alb" {
source = "terraform-aws-modules/alb/aws"
version = "~> 5.0"
name = "${var.prefix}-${var.environment}"
load_balancer_type = "application"
vpc_id = module.vpc.vpc_id
subnets = module.vpc.public_subnets
security_groups = [aws_security_group.alb.id]
https_listeners = [
{
"certificate_arn" = module.acm_alb.this_acm_certificate_arn
"port" = 443
},
]
target_groups = [
{
name = "${var.prefix}-default-${var.environment}"
backend_protocol = "HTTP"
backend_port = 80
}
]
tags = var.tags
}