infrastructure/main.tf at main · dutymate/infrastructure · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
module "acm" {
  source          = "./Modules/AWS/ACM"
  domain_name     = var.domain_name
  route53_zone_id = var.route53_zone_id
}

module "alb" {
  source                = "./Modules/AWS/ALB"
  alb_certificate_arn   = module.acm.alb_certificate_arn
  alb_health_check_path = var.alb_health_check_path
  public_subnets        = module.networking.public_subnets
  sg_alb_id             = module.security_group.sg_alb_id
  vpc_id                = module.networking.vpc_id
}

module "cloudfront" {
  source                               = "./Modules/AWS/CloudFront"
  aws_region                           = var.aws_region
  cloudfront_certificate_arn           = module.acm.cloudfront_certificate_arn
  domain_name                          = var.domain_name
  frontend_bucket_regional_domain_name = module.s3.frontend_bucket_regional_domain_name
}

module "cloudwatch" {
  source = "./Modules/AWS/CloudWatch"
}

module "documentdb" {
  source           = "./Modules/AWS/DocumentDB"
  mongodb_password = var.mongodb_password
  mongodb_username = var.mongodb_username
  public_subnets   = module.networking.public_subnets
  sg_mongodb_id    = module.security_group.sg_mongodb_id
}

module "ecr" {
  source = "./Modules/AWS/ECR"
}

module "ecs" {
  source                      = "./Modules/AWS/ECS"
  alb_target_group_arn        = module.alb.alb_target_group_arn
  asset_bucket_arn            = module.s3.asset_bucket_arn
  aws_region                  = var.aws_region
  ecr_repository_url          = module.ecr.ecr_repository_url
  ecs_instance_profile_name   = module.iam.ecs_instance_profile_name
  ecs_log_group_name          = module.cloudwatch.ecs_log_group_name
  ecs_service_role_arn        = module.iam.ecs_service_role_arn
  ecs_task_execution_role_arn = module.iam.ecs_task_execution_role_arn
  ecs_task_role_arn           = module.iam.ecs_task_role_arn
  public_subnets              = module.networking.public_subnets
  sg_ecs_id                   = module.security_group.sg_ecs_id
}

module "ec2" {
  source                   = "./Modules/AWS/EC2"
  public_subnets           = module.networking.public_subnets
  sg_db_access_instance_id = module.security_group.sg_db_access_instance_id
}

module "elasticache" {
  source         = "./Modules/AWS/ElastiCache"
  public_subnets = module.networking.public_subnets
  sg_valkey_id   = module.security_group.sg_valkey_id
}

module "eventbridge" {
  source                                = "./Modules/AWS/EventBridge"
  api_secret_key                        = var.api_secret_key
  domain_name                           = var.domain_name
  eventbridge_api_destinations_role_arn = module.iam.eventbridge_api_destinations_role_arn
}

module "iam" {
  source = "./Modules/AWS/IAM"
}

module "kms" {
  source = "./Modules/AWS/KMS"
}

module "networking" {
  source                   = "./Modules/AWS/Networking"
  aws_region               = var.aws_region
  availability_zones       = var.availability_zones
  public_subnet_cidr_block = var.public_subnet_cidr_block
  vpc_cidr                 = var.vpc_cidr
}

module "rds" {
  source          = "./Modules/AWS/RDS"
  kms_rds_key_arn = module.kms.kms_rds_key_arn
  mysql_password  = var.mysql_password
  mysql_username  = var.mysql_username
  public_subnets  = module.networking.public_subnets
  sg_mysql_id     = module.security_group.sg_mysql_id
}

module "route53" {
  source                                 = "./Modules/AWS/Route53"
  alb_dns_name                           = module.alb.alb_dns_name
  alb_zone_id                            = module.alb.alb_zone_id
  cloudfront_distribution_domain_name    = module.cloudfront.cloudfront_distribution_domain_name
  cloudfront_distribution_hosted_zone_id = module.cloudfront.cloudfront_distribution_hosted_zone_id
  domain_name                            = var.domain_name
  google_site_verification_code          = var.google_site_verification_code
  route53_zone_id                        = var.route53_zone_id
}

module "s3" {
  source                      = "./Modules/AWS/S3"
  cloudfront_distribution_arn = module.cloudfront.cloudfront_distribution_arn
}

module "security_group" {
  source                   = "./Modules/AWS/SecurityGroup"
  public_subnet_cidr_block = var.public_subnet_cidr_block
  vpc_id                   = module.networking.vpc_id
}