You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
167 lines
3.8 KiB
HCL
167 lines
3.8 KiB
HCL
terraform {
|
|
required_providers {
|
|
digitalocean = {
|
|
source = "digitalocean/digitalocean"
|
|
version = "2.62.0"
|
|
}
|
|
ct = {
|
|
source = "poseidon/ct"
|
|
version = "0.13.0"
|
|
}
|
|
null = {
|
|
source = "hashicorp/null"
|
|
version = "3.2.4"
|
|
}
|
|
time = {
|
|
source = "hashicorp/time"
|
|
version = "0.13.1"
|
|
}
|
|
cloudflare = {
|
|
source = "cloudflare/cloudflare"
|
|
version = "5.8.2"
|
|
}
|
|
}
|
|
}
|
|
|
|
variable "do_token" {
|
|
description = "DigitalOcean token"
|
|
type = string
|
|
}
|
|
|
|
variable "cluster_name" {
|
|
type = string
|
|
description = "Cluster name used as prefix for the machine names"
|
|
}
|
|
|
|
variable "ssh_keys" {
|
|
type = list(string)
|
|
description = "SSH public keys for user 'core' (and to register on Digital Ocean for the first)"
|
|
}
|
|
|
|
variable "server_type" {
|
|
type = string
|
|
default = "s-1vcpu-1gb"
|
|
description = "The server type to rent"
|
|
}
|
|
|
|
variable "datacenter" {
|
|
type = string
|
|
description = "The region to deploy in"
|
|
}
|
|
|
|
variable "flatcar_stable_version" {
|
|
type = string
|
|
description = "The Flatcar Stable release you want to use for the initial installation, e.g., 2605.12.0"
|
|
}
|
|
|
|
variable "cloudflare_zone_id" {
|
|
type = string
|
|
description = "Cloudflare zone ID"
|
|
}
|
|
|
|
variable "cloudflare_account_id" {
|
|
type = string
|
|
description = "Cloudflare account id"
|
|
}
|
|
|
|
variable "cloudflare_api_token" {
|
|
type = string
|
|
description = "Cloudflare api token"
|
|
}
|
|
|
|
variable "domain" {
|
|
type = string
|
|
description = "Root domain to use"
|
|
}
|
|
|
|
variable "subdomains" {
|
|
type = list
|
|
description = "Subdomains to setup"
|
|
}
|
|
|
|
provider "digitalocean" {
|
|
token = var.do_token
|
|
}
|
|
|
|
provider "cloudflare" {
|
|
api_token = var.cloudflare_api_token
|
|
}
|
|
|
|
resource "digitalocean_ssh_key" "first" {
|
|
name = var.cluster_name
|
|
public_key = var.ssh_keys.0
|
|
}
|
|
|
|
resource "digitalocean_custom_image" "flatcar" {
|
|
name = "flatcar-stable-${var.flatcar_stable_version}"
|
|
url = "https://stable.release.flatcar-linux.net/amd64-usr/${var.flatcar_stable_version}/flatcar_production_digitalocean_image.bin.bz2"
|
|
regions = [var.datacenter]
|
|
}
|
|
|
|
resource "digitalocean_reserved_ip" "machine" {
|
|
region = digitalocean_droplet.machine.region
|
|
}
|
|
|
|
resource "cloudflare_dns_record" "root" {
|
|
zone_id = var.cloudflare_zone_id
|
|
name = "@"
|
|
content = digitalocean_reserved_ip.machine.ip_address
|
|
type = "A"
|
|
proxied = false
|
|
ttl = 300
|
|
}
|
|
|
|
resource "cloudflare_dns_record" "subdomains" {
|
|
for_each = toset(var.subdomains)
|
|
zone_id = var.cloudflare_zone_id
|
|
name = each.key
|
|
content = var.domain
|
|
type = "CNAME"
|
|
proxied = false
|
|
ttl = 300
|
|
}
|
|
|
|
resource "digitalocean_volume" "machine" {
|
|
region = var.datacenter
|
|
name = "${var.cluster_name}"
|
|
size = 60
|
|
initial_filesystem_type = "ext4"
|
|
initial_filesystem_label = "appstorage"
|
|
description = "persistent storage for docker apps"
|
|
}
|
|
|
|
resource "digitalocean_droplet" "machine" {
|
|
name = "${var.cluster_name}"
|
|
image = digitalocean_custom_image.flatcar.id
|
|
region = var.datacenter
|
|
size = var.server_type
|
|
ssh_keys = [digitalocean_ssh_key.first.fingerprint]
|
|
user_data = file("ignition.json")
|
|
lifecycle {
|
|
create_before_destroy = true
|
|
}
|
|
}
|
|
|
|
resource "time_sleep" "wait_10_seconds" {
|
|
create_duration = "10s"
|
|
}
|
|
|
|
resource "digitalocean_reserved_ip_assignment" "machine" {
|
|
ip_address = digitalocean_reserved_ip.machine.ip_address
|
|
droplet_id = digitalocean_droplet.machine.id
|
|
# sometimes digital ocean throws an error for this resource
|
|
# saying the droplet has a pending event so we delay a few seconds
|
|
depends_on = [time_sleep.wait_10_seconds]
|
|
}
|
|
|
|
resource "digitalocean_volume_attachment" "machine" {
|
|
droplet_id = digitalocean_droplet.machine.id
|
|
volume_id = digitalocean_volume.machine.id
|
|
}
|
|
|
|
output "domain-mappings" {
|
|
value = {
|
|
"${var.domain}" = digitalocean_reserved_ip.machine.ip_address
|
|
}
|
|
}
|