Infrastructure components: - VPC with single public subnet (10.0.0.0/16) - Security group (SSH/HTTP/HTTPS from anywhere) - EC2 instance (t3.medium, Ubuntu 24.04, 30GB encrypted gp3) - S3 bucket for backups (versioned, encrypted) - IAM role with S3FullAccess for EC2 - Route 53 DNS (gitea.poll-streams.com → EC2) - Ed25519 SSH key generation via Terraform
29 lines
424 B
HCL
29 lines
424 B
HCL
terraform {
|
|
required_version = ">= 1.15.0"
|
|
|
|
required_providers {
|
|
aws = {
|
|
source = "hashicorp/aws"
|
|
version = "= 6.49.0"
|
|
}
|
|
tls = {
|
|
source = "hashicorp/tls"
|
|
version = "= 4.3.0"
|
|
}
|
|
local = {
|
|
source = "hashicorp/local"
|
|
version = "= 2.9.0"
|
|
}
|
|
}
|
|
}
|
|
|
|
provider "aws" {
|
|
region = var.aws_region
|
|
|
|
default_tags {
|
|
tags = {
|
|
Project = "qvest-task"
|
|
}
|
|
}
|
|
}
|