main.tf

module "website" {
  providers = {
    aws     = aws.aws-uw1
    aws.dns = aws.aws-uw1
  }
  source                       = "infrahouse/website-pod/aws"
  version                      = "~> 4.6"
  environment                  = var.environment
  ami                          = "ami-0ea80799a59ad106b"
  backend_subnets              = data.aws_subnets.management_private.ids
  zone_id                      = data.aws_route53_zone.infrahouse_com.zone_id
  internet_gateway_id          = data.aws_internet_gateway.management.id
  key_pair_name                = data.aws_key_pair.aleks.key_name
  subnets                      = data.aws_subnets.management_public.ids
  userdata                     = module.webserver_userdata.userdata
  instance_profile_permissions = data.aws_iam_policy_document.webserver_permissions.json
  stickiness_enabled           = true
  alb_access_log_enabled       = true
  on_demand_base_capacity      = 1
}

module "webserver_userdata" {
  providers = {
    aws = aws.aws-uw1
  }
  source                   = "infrahouse/cloud-init/aws"
  version                  = "~> 1.6"
  environment              = var.environment
  role                     = "webserver"
  puppet_hiera_config_path = "/opt/infrahouse-puppet-data/environments/${var.environment}/hiera.yaml"
  packages = [
    "infrahouse-puppet-data"
  ]
}

data "aws_iam_policy_document" "webserver_permissions" {
  statement {
    actions   = ["ec2:Describe*"]
    resources = ["*"]
  }
}