blob: f3b4c90c579637bca3a7d035fc07a9a40a9fe5c5 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
|
terraform {
backend "s3" {
bucket = "org-buetow-tfstate"
key = "org-buetow-bastion/terraform.tfstate"
region = "eu-central-1"
encrypt = true
}
}
provider "aws" {
region = "eu-central-1" # or your preferred AWS region
}
resource "aws_key_pair" "id_rsa_pub" {
key_name = "bastion-id-rsa-pub"
public_key = file("${path.module}/id_rsa.pub")
tags = {
Name = "bastion"
}
}
resource "aws_instance" "bastion" {
#ami = "ami-024f768332f080c5e" # Amazon Linux 2023
ami = "ami-0d0b8f748d0b16f5e" # Amazon Linux 2023 ARM
# ami = "ami-0c5e86158864d14dd" # RHEL-9.3.0 arm
#instance_type = "t2.micro"
instance_type = "t4g.nano" # ARM
key_name = aws_key_pair.id_rsa_pub.key_name
subnet_id = data.terraform_remote_state.base.outputs.public_subnet_a_id
ipv6_address_count = 1
#ipv6_addresses = [data.terraform_remote_state.base.public_subnet_a_ipv6_cidr_block]
vpc_security_group_ids = [
data.terraform_remote_state.base.outputs.allow_ssh_sg_id,
data.terraform_remote_state.base.outputs.allow_web_sg_id,
data.terraform_remote_state.base.outputs.allow_outbound_sg_id,
]
user_data = data.template_file.user_data.rendered
tags = {
Name = "bastion"
}
}
resource "aws_route53_record" "a_record" {
zone_id = data.terraform_remote_state.base.outputs.zone_id
name = "bastion.${data.terraform_remote_state.base.outputs.zone_name}"
type = "A"
ttl = "300"
records = [aws_instance.bastion.public_ip]
}
resource "aws_route53_record" "aaaa_record" {
zone_id = data.terraform_remote_state.base.outputs.zone_id
name = "bastion.${data.terraform_remote_state.base.outputs.zone_name}"
type = "AAAA"
ttl = "300"
records = aws_instance.bastion.ipv6_addresses
}
|
