-
Notifications
You must be signed in to change notification settings - Fork 4
/
alb.tf
94 lines (82 loc) · 2.54 KB
/
alb.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
###################################
# alb (target group add attachment)
###################################
resource "aws_alb_target_group" "nginx" {
name = "${var.env}-${var.project_name}-nginx-tg"
port = 80
protocol = "HTTP"
vpc_id = "${lookup(var.vpc, "vpc_id")}"
deregistration_delay = 30
health_check {
interval = 30
path = "/nginx_status"
protocol = "HTTP"
timeout = 5
unhealthy_threshold = 2
matcher = 200
}
tags {
Name = "${var.env}-${var.project_name}-nginx-tg"
env = "${var.env}"
}
}
###################################
# alb
###################################
resource "aws_alb" "nginx" {
name = "${var.env}-${var.project_name}-alb"
subnets = ["${lookup(var.vpc, "front-a")}", "${lookup(var.vpc, "front-c")}"]
security_groups = ["${aws_security_group.alb-sg.id}"]
internal = false
enable_deletion_protection = false
access_logs {
enabled = true
bucket = "${aws_s3_bucket.alb-logs.bucket}"
prefix = "nginx"
}
tags {
Name = "${var.env}-${var.project_name}-alb"
env = "${var.env}"
}
}
###################################
# alb (listen add target group 80)
###################################
resource "aws_alb_listener" "nginx-alb-insecure-listener" {
load_balancer_arn = "${aws_alb.nginx.arn}"
port = "80"
protocol = "HTTP"
default_action {
target_group_arn = "${aws_alb_target_group.nginx.arn}"
type = "forward"
}
}
##################################
# alb (listen add target group 443)
###################################
# resource "aws_alb_listener" "nginx-alb-secure-listener" {
# load_balancer_arn = "${aws_alb.nginx.arn}"
# port = "443"
# protocol = "HTTPS"
# ssl_policy = "ELBSecurityPolicy-2016-08"
# certificate_arn = "${var.alb_certificate_arn}"
# default_action {
# target_group_arn = "${aws_alb_target_group.nginx.arn}"
# type = "forward"
# }
# }
###################################
# alb (listen rule)
###################################
resource "aws_alb_listener_rule" "nginx-alb-listener-rule" {
listener_arn = "${aws_alb_listener.nginx-alb-insecure-listener.arn}"
priority = 100
action {
type = "forward"
target_group_arn = "${aws_alb_target_group.nginx.arn}"
}
condition {
field = "path-pattern"
values = ["/"]
}
}