resources.tf

resource "aws_autoscaling_group" "SimpleZFSAutoSaclingGroup" {
  capacity_rebalance        = "false"
  default_cooldown          = "300"
  desired_capacity          = "1"
  force_delete              = "false"
  health_check_grace_period = "300"
  health_check_type         = "EC2"

  # launch_template {
  #   id      = aws_launch_template.ZFSSimpleAppTemplate.id
  #   version = "$Latest"
  # }
  launch_configuration = aws_launch_configuration.ZFS_LAUNCH_CONFIGURATION.id
  max_instance_lifetime   = "0"
  max_size                = "1"
  metrics_granularity     = "1Minute"
  min_size                = "1"
  name                    = "SimpleZFSAutoSaclingGroup"
  protect_from_scale_in   = "false"
  target_group_arns         = [aws_lb_target_group.ALB_ZFS_TARGET_GROUP.arn]
  vpc_zone_identifier       = [aws_subnet.SUBNET1.id,aws_subnet.SUBNET2.id]
  wait_for_capacity_timeout = "10m"
  

}


resource "aws_db_instance" "ZFS_DB" {
  snapshot_identifier = var.snapshot_identifier_id
  instance_class       = "db.t3.small"
  #allocated_storage    = 30
  #engine               = "sqlserver-ex"
  #name                 = "ZFSPOCDB"
  #username             = "admin"
  #password             = var.database_password
  db_subnet_group_name = aws_db_subnet_group.SUBNET_GROUP_FOR_RDS.name
  vpc_security_group_ids = [aws_security_group.LAUCH_WIZARD_ZFS_DB.id]
}


resource "aws_internet_gateway" "IGW_ZFS" {
  vpc_id = aws_vpc.VPC_ZFS.id
}

resource "aws_launch_configuration" "ZFS_LAUNCH_CONFIGURATION" {
    name_prefix = "ZFS_LAUNCH_CONFIGURATION"
    image_id = var.image_id
    instance_type = "t2.small"
    security_groups = [aws_security_group.LAUCH_WIZARD_ZFS.id]
    key_name = var.keypair_name
    user_data = <<EOF
         <script>
           echo Current date and time >> %SystemRoot%\Temp\test.log
           echo %DATE% %TIME% >> %SystemRoot%\Temp\test.log
           json -I -f %SystemRoot%/../inetpub/wwwroot/ZFSsampleApp/appsettings.json -e "this.ConnectionStrings.DefaultConnection='Server=${aws_db_instance.ZFS_DB.endpoint};Database=aspnet-ZFSWebAppPOC-8A6458F2-6992-47F2-9B57-CE6120E89588;User Id=admin;Password=ZurichINS;'"
           </script>
         <persist>true</persist>
    EOF
}

resource "aws_db_subnet_group" "SUBNET_GROUP_FOR_RDS" {
  name       = "zfssubnetgrouppoc"
  subnet_ids = [aws_subnet.SUBNET1.id, aws_subnet.SUBNET2.id]

  tags = {
    Terraform = "Yes"
  }
}


# resource "aws_launch_template" "ZFSSimpleAppTemplate" {
#   default_version         = "1"
#   image_id                = var.image_id
#   instance_type           = "t2.small"
#   key_name                = "zfs"
#   name                    = "ZFSSimpleAppTemplate"
#   security_group_names  = [aws_security_group.LAUCH_WIZARD_ZFS.name]

#    capacity_reservation_specification {
#     capacity_reservation_preference = "open"
#   }

#   cpu_options {
#     core_count       = 4
#     threads_per_core = 2
#   }

#   credit_specification {
#     cpu_credits = "standard"
#   }

#   disable_api_termination = true

#   ebs_optimized = true

#   metadata_options {
#     http_endpoint               = "enabled"
#     http_tokens                 = "required"
#     http_put_response_hop_limit = 1
#     instance_metadata_tags      = "enabled"
#   }

#   monitoring {
#     enabled = true
#   }

#   network_interfaces {
#     associate_public_ip_address = true
#   }

#   #placement {
#   #  availability_zone = "us-west-2a"
#   #}

#   instance_initiated_shutdown_behavior = "terminate"

  
# }

resource "aws_lb" "ALB_ZFS" {
  desync_mitigation_mode     = "defensive"
  drop_invalid_header_fields = "false"
  enable_deletion_protection = "false"
  enable_http2               = "true"
  enable_waf_fail_open       = "false"
  idle_timeout               = "60"
  internal                   = "false"
  ip_address_type            = "ipv4"
  load_balancer_type         = "application"
  name                       = "SimpleZFSAutoSaclingGroup-1"
  security_groups            = [aws_security_group.LAUCH_WIZARD_ZFS.id]


  subnets = [aws_subnet.SUBNET1.id, aws_subnet.SUBNET2.id]

  tags = {
    Terraform = "Yes"
  }
}

resource "aws_lb_listener" "ALB_ZFS_LISTENER" {
  default_action {
    target_group_arn = aws_lb_target_group.ALB_ZFS_TARGET_GROUP.arn
    type = "forward"
  }

  load_balancer_arn = aws_lb.ALB_ZFS.arn
  port              = "80"
  protocol          = "HTTP"

  tags = {
    Terraform = "Yes"
  }
}

resource "aws_lb_target_group" "ALB_ZFS_TARGET_GROUP" {
  deregistration_delay = "300"

  health_check {
    enabled             = "true"
    healthy_threshold   = "5"
    interval            = "30"
    matcher             = "200"
    path                = "/"
    port                = "80"
    protocol            = "HTTP"
    timeout             = "5"
    unhealthy_threshold = "5"
  }

  load_balancing_algorithm_type = "round_robin"
  name                          = "SimpleZFSAutoSaclingGroup-1"
  port                          = "80"
  protocol                      = "HTTP"
  protocol_version              = "HTTP1"
  slow_start                    = "0"

  stickiness {
    cookie_duration = "86400"
    enabled         = "false"
    type            = "lb_cookie"
  }

  target_type = "instance"
  vpc_id      = aws_vpc.VPC_ZFS.id

  tags = {
    Terraform = "Yes"
  }
}

resource "aws_main_route_table_association" "VPC_ZFS" {
  route_table_id = aws_route_table.ROUTE_TABLE_ZFS.id
  vpc_id         = aws_vpc.VPC_ZFS.id
}

resource "aws_network_acl" "ZFS_ACL" {
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "100"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "100"
    to_port    = "0"
  }

  subnet_ids = [aws_subnet.SUBNET2.id, aws_subnet.SUBNET3.id, aws_subnet.SUBNET1.id]
  vpc_id     = aws_vpc.VPC_ZFS.id


  tags = {
    Terraform = "Yes"
  }
}

resource "aws_network_interface" "ALB_ENI_1" {
  description = "ELB app/SimpleZFSAutoSaclingGroup-1/3f1c9137a6b527fa"
  ipv4_prefix_count  = "0"
  ipv6_address_count = "0"
  ipv6_prefix_count  = "0"
  private_ip         = "172.31.11.50"
  security_groups            = [aws_security_group.LAUCH_WIZARD_ZFS.id]
  source_dest_check  = "true"
  subnet_id          = aws_subnet.SUBNET1.id
}

# resource "aws_network_interface" "RDS_ENI" {
#   description = "RDSNetworkInterface"
#   #interface_type     = "interface"
#   ipv4_prefix_count  = "0"
#   ipv6_address_count = "0"
#   ipv6_prefix_count  = "0"
#   private_ip         = "172.31.46.43"
#   security_groups    = [aws_security_group.LAUCH_WIZARD_ZFS.id]
#   source_dest_check  = "true"
#   subnet_id          = data.terraform_remote_state.local.outputs.aws_subnet_SUBNET1_id
# }

resource "aws_network_interface" "ALB_ENI_2" {
  ipv4_prefix_count  = "0"
  ipv6_address_count = "0"
  ipv6_prefix_count  = "0"
  private_ip         = "172.31.22.43"
  security_groups            = [aws_security_group.LAUCH_WIZARD_ZFS.id]
  source_dest_check  = "true"
  subnet_id          = aws_subnet.SUBNET2.id
}

resource "aws_network_interface" "ALB_ENI_3" {
  description = "ELB app/SimpleZFSAutoSaclingGroup-1/3f1c9137a6b527fa"
  #interface_type     = "interface"
  ipv4_prefix_count  = "0"
  ipv6_address_count = "0"
  ipv6_prefix_count  = "0"
  private_ip         = "172.31.28.119"
  security_groups            = [aws_security_group.LAUCH_WIZARD_ZFS.id]
  source_dest_check  = "true"
  subnet_id          = aws_subnet.SUBNET3.id
}


resource "aws_route_table" "ROUTE_TABLE_ZFS" {
  route {
    cidr_block = "0.0.0.0/0"
    gateway_id = aws_internet_gateway.IGW_ZFS.id
  }

  vpc_id = aws_vpc.VPC_ZFS.id

  tags = {
    Terraform = "Yes"
  }
}


resource "aws_security_group" "LAUCH_WIZARD_ZFS" {
  description = "launch-wizard-2"

  egress {
    cidr_blocks = ["0.0.0.0/0"]
    from_port   = "0"
    protocol    = "-1"
    self        = "false"
    to_port     = "0"
  }

  ingress {
    cidr_blocks = ["0.0.0.0/0"]
    from_port   = "3389"
    protocol    = "tcp"
    self        = "false"
    to_port     = "3389"
  }

  ingress {
    cidr_blocks = ["0.0.0.0/0"]
    from_port   = "443"
    protocol    = "tcp"
    self        = "false"
    to_port     = "443"
  }

  ingress {
    cidr_blocks = ["0.0.0.0/0"]
    from_port   = "80"
    protocol    = "tcp"
    self        = "false"
    to_port     = "80"
  }

  ingress {
    cidr_blocks = ["0.0.0.0/0"]
    from_port   = "8172"
    protocol    = "tcp"
    self        = "false"
    to_port     = "8172"
  }

  name   = "launch-wizard-2"
  vpc_id = aws_vpc.VPC_ZFS.id

  tags = {
    Terraform = "Yes"
  }
}

resource "aws_security_group" "LAUCH_WIZARD_ZFS_DB" {
  description = "launch-wizard-db"

  egress {
    cidr_blocks = ["0.0.0.0/0"]
    from_port   = "0"
    protocol    = "-1"
    self        = "false"
    to_port     = "0"
  }

  ingress {
    cidr_blocks = ["0.0.0.0/0"]
    from_port   = "3389"
    protocol    = "tcp"
    self        = "false"
    to_port     = "3389"
  }

  ingress {
    cidr_blocks = ["0.0.0.0/0"]
    from_port   = "1433"
    protocol    = "tcp"
    self        = "false"
    to_port     = "1433"
  }

  name   = "launch-wizard-db"
  vpc_id = aws_vpc.VPC_ZFS.id

  tags = {
    Terraform = "Yes"
  }
}


resource "aws_subnet" "SUBNET1" {
  assign_ipv6_address_on_creation                = "false"
  cidr_block                                     = "172.31.16.0/20"
  enable_dns64                                   = "false"
  availability_zone                              = "eu-central-1a"
  enable_resource_name_dns_a_record_on_launch    = "false"
  enable_resource_name_dns_aaaa_record_on_launch = "false"
  ipv6_native                                    = "false"
  map_public_ip_on_launch             = "true"
  private_dns_hostname_type_on_launch = "ip-name"
  vpc_id                              = aws_vpc.VPC_ZFS.id

  tags = {
    Terraform = "Yes"
  }
}

resource "aws_subnet" "SUBNET2" {
  assign_ipv6_address_on_creation                = "false"
  cidr_block                                     = "172.31.32.0/20"
  availability_zone                              = "eu-central-1b"
  enable_dns64                                   = "false"
  enable_resource_name_dns_a_record_on_launch    = "false"
  enable_resource_name_dns_aaaa_record_on_launch = "false"
  ipv6_native                                    = "false"
  map_public_ip_on_launch             = "true"
  private_dns_hostname_type_on_launch = "ip-name"
  vpc_id                              = aws_vpc.VPC_ZFS.id

  tags = {
    Terraform = "Yes"
  }
}

resource "aws_subnet" "SUBNET3" {
  assign_ipv6_address_on_creation                = "false"
  cidr_block                                     = "172.31.0.0/20"
  availability_zone                              = "eu-central-1c"
  enable_dns64                                   = "false"
  enable_resource_name_dns_a_record_on_launch    = "false"
  enable_resource_name_dns_aaaa_record_on_launch = "false"
  ipv6_native                                    = "false"
  map_public_ip_on_launch             = "true"
  private_dns_hostname_type_on_launch = "ip-name"
  vpc_id                              = aws_vpc.VPC_ZFS.id

  tags = {
    Terraform = "Yes"
  }
}

resource "aws_vpc" "VPC_ZFS" {
  assign_generated_ipv6_cidr_block = "false"
  cidr_block                       = "172.31.0.0/16"
  enable_classiclink               = "false"
  enable_classiclink_dns_support   = "false"
  enable_dns_hostnames             = "true"
  enable_dns_support               = "true"
  instance_tenancy                 = "default"

  tags = {
    Terraform = "Yes"
  }
}