Infrastructure as Code (IaC) lab

Some quick sample files used for terraform & ansible from my home lab. Will add more as & when time I have time.

Examples

Terraform/Ansible examples arranged under folders

vault-initial-populate/
- Initial populate vault secrets
- Required for other examples to work
- helper pwsh/bash scripts
cloudflare/
- Terraform manage Domain in cloudflare
- DNS
- Page Rule, redirect
- TODO: setup LB
- TODO: setup Worker static HTML from gitrepo
aws/
- Terraform Create
  - new VPC, subnet, IGW in specified region
  - Create EC2 instances
    - cloud init
    - allow access from known IP (aws security group)
- Ansible configure EC2 instances
- TODO: SSL Certs
- TODO: AWS App LoadBalancer & DNS
- TODO: Dynamic secret from vault
kvm/
- Terraform setup VMs via KVM with Ansible
  - cloud init
  - RHEL based
  - Debian based
- Ansible configure instances
  - install base software / configuration
  - 1x VMs haproxy as loadbalancer t0 nginx vms
  - 4x VMs nginx content
    - GIT pull content
    - add host ID in page
- TODO: SSL Letsencrypt
docker/
- Terraform create basic docker instances on remote host
TODO: Cloudflare DNS/LB/WAF/CDN
TODO: Add monitoring
TODO: review ansible-lockdown
TODO: hyperv windows server 2022 (if nested virt works)
TODO: Azure Examples