Д3№6 YC&Terraform_1

.gitignore

@@ -0,0 +1,5 @@
+*.tfstate
+*.tfstate.*.backup
+*.tfstate.backup
+*.tfvars
+.terraform/

README.md

@@ -1,2 +1,4 @@
 bastion_IP = 51.250.11.249
 someinternalhost_IP = 10.128.0.14
+testapp_IP = 62.84.118.237
+testapp_port = 9292

configscripts/deploy.sh

@@ -0,0 +1,4 @@
+#!/bin/bash
+git clone -b monolith https://github.com/express42/reddit.git
+cd reddit && bundle install
+puma -d

configscripts/install_mongodb.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+wget -qO - https://www.mongodb.org/static/pgp/server-4.2.asc | sudo apt-key add -
+echo "deb [ arch=amd64,arm64 ] https://repo.mongodb.org/apt/ubuntu xenial/mongodb-org/4.2 multiverse" | sudo tee /etc/apt/sources.list.d/mongodb-org-4.2.list
+apt-get update
+apt-get install -y mongodb-org

configscripts/install_ruby.sh

@@ -0,0 +1,3 @@
+#!/bin/bash
+apt update
+apt install -y ruby-full ruby-bundler build-essential

deploy.sh

@@ -0,0 +1,4 @@
+#!/bin/bash
+git clone -b monolith https://github.com/express42/reddit.git
+cd reddit && bundle install
+puma -d

install_mongodb.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+wget -qO - https://www.mongodb.org/static/pgp/server-4.2.asc | sudo apt-key add -
+echo "deb [ arch=amd64,arm64 ] https://repo.mongodb.org/apt/ubuntu xenial/mongodb-org/4.2 multiverse" | sudo tee /etc/apt/sources.list.d/mongodb-org-4.2.list
+apt-get update
+apt-get install -y mongodb-org

install_ruby.sh

@@ -0,0 +1,3 @@
+#!/bin/bash
+apt update
+apt install -y ruby-full ruby-bundler build-essential

packer/key.json

@@ -0,0 +1,8 @@
+{
+   "id": "ajeutlkkq1j5e7cvvfj2",
+   "service_account_id": "aje0epias37pu9ft7vlf",
+   "created_at": "2023-06-09T10:50:14.856252065Z",
+   "key_algorithm": "RSA_2048",
+   "public_key": "-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr02dGkqhgL+zztwIdP8L\nIH6RNMxaSKKuMittwODLnOK1+xBKl+lGJ4ixbPWgbfP29YOMeucLlSUxaHBXVMk8\nBVXJ9ncsvD2FIAL9vjsOX+YLFxy3z65CRWa9sKRkNJxuxxZYAIHdE4xLEPbK37Ld\ngYVLkD/9IygO2FllIbiMqcoGRj6Mun1zpODV2cF4mTefDlYbM1uyE3/nEo88+uZK\neAcYsshP7IVDp84SBpj6ga7F45qS8WKK+Qc9q9yAXDjfitkKg6RtmI1DC93ciORc\nxsvrKMjDF+iVi6Y3+AKtIeyQT9u3fR9GbKYSCtz6pUauC5xIUq+MWCzq8ZCMHNhY\n2QIDAQAB\n-----END PUBLIC KEY-----\n",
+   "private_key": "-----BEGIN PRIVATE KEY-----\nMIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQCvTZ0aSqGAv7PO\n3Ah0/wsgfpE0zFpIoq4yK23A4Muc4rX7EEqX6UYniLFs9aBt8/b1g4x65wuVJTFo\ncFdUyTwFVcn2dyy8PYUgAv2+Ow5f5gsXHLfPrkJFZr2wpGQ0nG7HFlgAgd0TjEsQ\n9srfst2BhUuQP/0jKA7YWWUhuIypygZGPoy6fXOk4NXZwXiZN58OVhszW7ITf+cS\njzz65kp4BxiyyE/shUOnzhIGmPqBrsXjmpLxYor5Bz2r3IBcON+K2QqDpG2YjUML\n3dyI5FzGy+soyMMX6JWLpjf4Aq0h7JBP27d9H0ZsphIK3PqlRq4LnEhSr4xYLOrx\nkIwc2FjZAgMBAAECggEANx8BeiXjWHdu02mOYzNazVHe2Ko07Ufx3CaZsR8+Bsum\nixYZTmD0RTQPDgLB+jDPA23kuzRxCOmT+pHwc+F+tPK/uXbJozr45BLstGcfYvoT\nnKXUCkJx5h6jIKrgM0bI8mLNMwOifyYK6H+hVOuKCNLf6rCkKOzMliytxwefezdb\n1A8cElxoAWB6+fEO4WOKFxkXHasbaVMP4fxnco3z1NpzOp7HSO13PA6aMsw2ANXg\nwdQTRSNfpkEqyoSJa6r5h7zhexo0A7jGE4Y0Xeh+pIOL4c8drUit0g7TZBXBRHK+\n22w2yfYFA37SDgimgbe550T+KNxEdVKBSjJwjRcWHQKBgQC8agT+VMhihxjXM42Q\nU86N+1yWE7CSWKQMdvGlH9KixRP2Do5lPozhmycnJAkARzYy1l1OoJRNxGXdAOco\nruVCiSw301pGmTkhY3+RUTDuMsjjRPgyq5+LhilU4H/EF+l/NGT6ulZuP6cV5GYg\nnw/yQb7Wmb4jv1yORlND7ZutowKBgQDuL572mGMVSwtiiXr+ZBCosD9FtR0qbuLx\n404Rg60fofn6tpZYQPY7WGv0eHcYw3K0E1p/MqWn6Tmrjq38WnK3y0UTfK0Zi1Nd\nH2oCkRLL0yfJEzInJVVWKkB0yhohcwK9cu7aM3zwwSEnWMGOgCE/HJpt72zAkavR\nheMLcSuPUwKBgQCkcWfgTkECdWTB1nXUpMCffOYm+hJe+ExdsKZg9vBRLe6pD7VK\nOhidg1vdtn7ApmZwYlXXnSEy6pn5FKOsB1GDC9Py+V1ORsbtFDkvrIwnKV3ZtcVl\n/BJopPSH5tS8Yh5h7mm/x0hOOvHqkohsKkexqZ4VEOQ5sPfoGQrtO4FnPwKBgQCq\nHxdB+BulBMGv8pQHiL8hTSkUB8U6HpM3w2tqNQt9MXrTqH//rv5v6rrIlRYzeL2/\ngqc7fJg3Mux+7Vy1hoCzZ5sBzSXxvcKgG6TjCm1LaZjcFDrZHOAzt9/rysIZLAVD\n/Qg+j1Hov3iHmuw8dKXKZwqiBMU/UYxQDXnaHU3IgwKBgD7j1R0ObzJA/HVzIPRJ\nYgFgMRsuMuKgorjHzYSHgaU2UVoAQEWSj8mkviWQzHYTEAEkkQRNTC8eB4bZBc9k\nt1pCNgk2H+xuzOxva+/eww5kRqd5CQuPDeLLgrQSi1siPA1cnzUJpSiviYlZ3gq9\nXx454O4qontikJBy3op/xmR1\n-----END PRIVATE KEY-----\n"
+}

packer/scripts/install_mongodb.sh

@@ -0,0 +1,7 @@
+#!/bin/sh
+wget -qO - https://www.mongodb.org/static/pgp/server-3.2.asc | sudo apt-key add - 
+echo "deb http://repo.mongodb.org/apt/ubuntu xenial/mongodb-org/3.2 multiverse" | tee /etc/apt/sources.list.d/mongodb-org-3.2.list
+apt-get update
+apt install -y mongodb-org
+systemctl start mongod
+systemctl enable mongod

packer/scripts/install_ruby.sh

@@ -0,0 +1,3 @@
+#!/bin/sh
+apt update
+apt install -y ruby-full ruby-bundler build-essential

packer/ubuntu16.json

@@ -0,0 +1,33 @@
+{
+    "variables": {
+        "service_account_key_file": "",
+        "folder_id": "",
+        "source_image_family": "",
+        "ssh_username": ""
+    },
+    "builders": [
+        {
+            "type": "yandex",
+            "service_account_key_file": "{{user `service_account_key_file`}}",
+            "folder_id": "{{user `folder_id`}}",
+            "source_image_family": "{{user `source_image_family`}}",
+            "image_name": "reddit-base-{{timestamp}}",
+            "image_family": "reddit-base",
+            "ssh_username": "{{user `ssh_username`}}",
+            "use_ipv4_nat": "true",
+            "platform_id": "standard-v1"
+        }
+    ],
+    "provisioners": [
+        {
+            "type": "shell",
+            "script": "scripts/install_ruby.sh",
+            "execute_command": "sudo {{.Path}}"
+        },
+        {
+            "type": "shell",
+            "script": "scripts/install_mongodb.sh",
+            "execute_command": "sudo {{.Path}}"
+        }
+    ]
+}

packer/variables.json

@@ -0,0 +1,6 @@
+{ 
+"folder_id": "b1gnilmohmvq9fboq85r",
+"source_image_family": "ubuntu-1604-lts",
+"service_account_key_file": "key.json",
+"ssh_username": "ubuntu"
+}

packer/variables.json.example

@@ -0,0 +1,6 @@
+{ 
+"folder_id": "b1gnilmohmvq9fboq85r",
+"source_image_family": "ubuntu-1604-lts",
+"service_account_key_file": "key.json",
+"ssh_username": "ubuntu"
+}

terraform/files/deploy.sh

@@ -0,0 +1,10 @@
+#!/bin/bash
+set -e
+APP_DIR=${1:-$HOME}
+sudo apt-get install -y git
+git clone -b monolith https://github.com/express42/reddit.git $APP_DIR/reddit
+cd $APP_DIR/reddit
+bundle install
+sudo mv /tmp/puma.service /etc/systemd/system/puma.service
+sudo systemctl start puma
+sudo systemctl enable puma

terraform/files/puma.service

@@ -0,0 +1,13 @@
+[Unit]
+Description=Puma HTTP Server
+After=network.target
+
+[Service]
+Type=simple
+User=ubuntu
+WorkingDirectory=/home/ubuntu/reddit
+ExecStart=/bin/bash -lc 'puma'
+Restart=always
+
+[Install]
+WantedBy=multi-user.target

terraform/key.json

@@ -0,0 +1,8 @@
+{
+   "id": "ajeutlkkq1j5e7cvvfj2",
+   "service_account_id": "aje0epias37pu9ft7vlf",
+   "created_at": "2023-06-09T10:50:14.856252065Z",
+   "key_algorithm": "RSA_2048",
+   "public_key": "-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr02dGkqhgL+zztwIdP8L\nIH6RNMxaSKKuMittwODLnOK1+xBKl+lGJ4ixbPWgbfP29YOMeucLlSUxaHBXVMk8\nBVXJ9ncsvD2FIAL9vjsOX+YLFxy3z65CRWa9sKRkNJxuxxZYAIHdE4xLEPbK37Ld\ngYVLkD/9IygO2FllIbiMqcoGRj6Mun1zpODV2cF4mTefDlYbM1uyE3/nEo88+uZK\neAcYsshP7IVDp84SBpj6ga7F45qS8WKK+Qc9q9yAXDjfitkKg6RtmI1DC93ciORc\nxsvrKMjDF+iVi6Y3+AKtIeyQT9u3fR9GbKYSCtz6pUauC5xIUq+MWCzq8ZCMHNhY\n2QIDAQAB\n-----END PUBLIC KEY-----\n",
+   "private_key": "-----BEGIN PRIVATE KEY-----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\nXx454O4qontikJBy3op/xmR1\n-----END PRIVATE KEY-----\n"
+}

terraform/main.tf

@@ -0,0 +1,63 @@
+#terraform {
+#  required_providers {
+#    yandex = {
+#      source = "yandex-cloud/yandex"
+#      version = "0.89.0"
+#    }
+#  }
+#}
+
+provider "yandex" {
+#  token = "y0_AgAAAAAWejyQAATuwQAAAADk_g5kVSxJNM-1Ttqui1ssPSNIkVtIdRg"
+  service_account_key_file = var.service_account_key_file
+  cloud_id                 = var.cloud_id
+  folder_id                = var.folder_id
+  zone                     = var.zone
+}
+
+resource "yandex_compute_instance" "app" {
+  name = "reddit-app"
+
+  resources {
+    cores  = 2
+    memory = 4
+    core_fraction = 20
+  }
+
+  metadata = {
+  ssh-keys = "ubuntu:${file(var.public_key_path)}"
+  }
+
+  boot_disk {
+    initialize_params {
+      # Указать id образа созданного в предыдущем домашем задании
+      image_id = var.image_id
+    }
+  }
+
+  network_interface {
+    # Указан id подсети default-ru-central1-a
+    subnet_id = var.subnet_id
+    nat       = true
+  }
+
+  connection {
+  type = "ssh"
+  host = yandex_compute_instance.app.network_interface.0.nat_ip_address
+  user = "ubuntu"
+  agent = false
+  # путь до приватного ключа
+  private_key = file(var.private_key_path)
+  }
+
+  provisioner "file" {
+  source = "files/puma.service"
+  destination = "/tmp/puma.service"
+}
+
+  provisioner "remote-exec" {
+  script = "files/deploy.sh"
+}
+
+
+}

terraform/outputs.tf

@@ -0,0 +1,3 @@
+output "external_ip_address_app" {
+  value = yandex_compute_instance.app.network_interface.0.nat_ip_address
+}

terraform/terraform.tfvars.example

@@ -0,0 +1,8 @@
+cloud_id = "b1g"
+folder_id = "b1g"
+zone = "ru-central1-a"
+image_id = "fd8"
+public_key_path = "~/.ssh/ubuntu.pub"
+subnet_id = "e9bg"
+service_account_key_file = "key.json"
+private_key_path = "~/.ssh/ubuntu"

terraform/variables.tf

@@ -0,0 +1,28 @@
+variable cloud_id{
+  description = "Cloud"
+}
+variable folder_id {
+  description = "Folder"
+}
+variable zone {
+  description = "Zone"
+  # Значение по умолчанию
+  default = "ru-central1-a"
+}
+variable public_key_path {
+  # Описание переменной
+  description = "Path to the public key used for ssh access"
+}
+variable image_id {
+  description = "Disk image"
+}
+variable subnet_id{
+  description = "Subnet"
+}
+variable service_account_key_file{
+  description = "key.json"
+}
+variable private_key_path {
+  # Описание переменной
+  description = "Path to the public key used for ssh access"
+  }