terraform-aws-web-fargate-app

Terraform module for a load balanced ECS Service & task definition using the Fargate launch type.

It will create the following:

Application Load Balancer in the subnets you specify:
- alb_subnets_private if alb_internal = true
- alb_subnets_public if alb_internal = false
ECR Repositories for web and reverse_proxy images
ECS Task Definition
- web container using the definition you specify
- nginx_reverse_proxy container listening at port 443
  - Forwards request to port 127.0.0.1:80
- xray container listening at port 2000
ECS service
- Belongs of the cluster specified by ecs_cluster_id
- Creates tasks in the subnets specified in alb_subnets_public
IAM roles & policies
Security groups
CloudWatch log group

Usage

module "cool-module-name-here" {
  source  = "aoggz/fargate-app/aws"
  version = "2.0.0"

  resource_prefix                           = local.resource_prefix
  ecs_cluster_id                            = var.ecs_cluster_id
  acm_certificate_domain                    = var.acm_certificate_domain
  log_retention_in_days                     = 30
  app_domain                                = var.app_domain              # must be a subdomain of the acm_certificate_domain
  route53_hosted_zone_id                    = var.hosted_zone_id          # Route 53 hosted zone id in which alias to load balancer
  task_count                                = var.app_instance_count      # Number of instances to run
  reverse_proxy_cpu                         = var.reverse_proxy_cpu       # Number of CPU Units for reverse_proxy container
  reverse_proxy_memory                      = var.reverse_proxy_memory    # MB of RAM for reverse_proxy container
  reverse_proxy_version                     = "1.0.0"                     # Docker image tag of nginx_reverse_proxy container
  reverse_proxy_cert_state                  = "PA"
  reverse_proxy_cert_locality               = "Pittsburgh"
  reverse_proxy_cert_organization           = "Awesome"
  reverse_proxy_cert_organizational_unit    = "Sauce"
  reverse_proxy_cert_email_address          = "awesome@sau.ce"
  xray_cpu                                  = var.xray_cpu                # Number of CPU Units for xray container
  xray_memory                               = var.xray_memory             # MB of RAM for xray container
  alb_internal                              = true
  alb_subnets_public                        = var.public_subnet_ids
  alb_subnets_private                       = var.private_subnet_ids
  alb_listener_default_action               = "redirect"                  # Note: if redirect is used, another lb_listener_rule must be created that forwards to the target group
  alb_listener_default_redirect_host        = var.redirect_host
  alb_listener_default_redirect_port        = "443"
  alb_listener_default_redirect_protocol    = "HTTPS"
  alb_listener_default_redirect_status_code = "HTTP_302"
  vpc_id                                    = var.vpc_id
  web_cpu                                   = var.web_cpu                 # Number of CPU Units for web container
  web_memory                                = var.web_memory              # MB of RAM for web container
  web_image                                 = var.web_image               # Name of Docker image to use for web container
  web_version                               = var.web_version             # Version of Docker image to use for web container
  web_environment_variables = [
    {
      name  = "ASPNETCORE_ENVIRONMENT",
      value = var.aspnetcore_environment,
    },
  ]
}

https://www.terraform.io/docs/modules/sources.html

aoggz/terraform-aws-web-fargate-app

terraform-aws-web-fargate-app

Usage