terra_boi 0.0.13 → 1.0.2

data/lib/generators/terra_boi/host_initializer_generator.rb

@@ -2,26 +2,26 @@ require "generators/extensions"
 
 module TerraBoi
 	class HostInitializerGenerator < Rails::Generators::Base
-	  attr_accessor :application_name, :class_options
-	  class_option :domain_name, type: :string
-	  source_root File.expand_path('templates', __dir__)
+		attr_accessor :application_name, :class_options
+		class_option :domain_name, type: :string, default: 'example.com', aliases: ["d"]
+		source_root File.expand_path('templates', __dir__)
 
-	  desc (<<-EOF
-		  Generate host initializer rails file
-		  
-		  To execute, run rails generate terra_boi:host_initializer --domain_name example.com
-		  EOF
-	  	.gsub(/\t/, '')
-	  )
+		desc (<<-EOF
+			Generate host initializer rails file
+			
+			To execute, run rails generate terra_boi:host_initializer --domain_name example.com
+			EOF
+			.gsub(/\t/, '')
+		)
 
-	  def init
-	  	# defined in lib/generators/extensions
-	  	self.application_name = generate_application_name
-	  	self.class_options = options
-	  end
+		def init
+			# defined in lib/generators/extensions
+			self.application_name = generate_application_name
+			self.class_options = options
+		end
 
-	  def create_host_initializer_file
-	  	template "host_initializer.erb", "config/initializers/hosts.rb"
-	  end
+		def create_host_initializer_file
+			template "host_initializer.erb", "config/initializers/hosts.rb"
+		end
 	end
 end

data/lib/generators/terra_boi/templates/Dockerfile.erb

@@ -1,26 +1,7 @@
 FROM ruby:<%= class_options[:ruby_version] %>
 
-# replace shell with bash so we can source files
-RUN rm /bin/sh && ln -s /bin/bash /bin/sh
-
-RUN apt-get update -qq && apt-get install -y build-essential && apt-get install -y cron
-
-# # for postgres
-# RUN apt-get install -y libpq-dev
-
-# # for nokogiri
-# RUN apt-get install -y libxml2-dev libxslt1-dev
-
-# # for capybara-webkit
-# RUN apt-get install -y libqtwebkit4 libqt4-dev xvfb
-
-# for a JS runtime
-RUN curl -sL https://deb.nodesource.com/setup_11.x | bash -
-RUN apt-get install -y nodejs
-
-RUN node -v
-RUN npm -v
-
+RUN apt-get update -qq && apt-get install -y npm build-essential cron
+RUN curl -sL https://deb.nodesource.com/setup_12.x | bash - && apt-get install -y nodejs
 RUN npm install yarn -g
 
 ENV APP_HOME /<%= application_name %>
@@ -29,13 +10,13 @@ WORKDIR $APP_HOME
 
 ADD Gemfile* $APP_HOME/
 RUN bundle install
+RUN yarn install --check-files
 
 ADD . $APP_HOME
 
-RUN yarn install --check-files
 RUN RAILS_ENV=production rails assets:precompile
 RUN service cron start
 
 EXPOSE 3000
 
-ENTRYPOINT bin/rails server --port 3000 -b 0.0.0.0
+ENTRYPOINT rake db:migrate && bin/rails server --port 3000 -b 0.0.0.0

data/lib/generators/terra_boi/templates/cert/main.tf.erb

@@ -0,0 +1,32 @@
+provider "aws" {
+	version = "~> 2.0"
+	region  = var.region
+}
+
+# ---------------------------------------------------------------------------------------------------------------------
+# 1. STATE
+# ---------------------------------------------------------------------------------------------------------------------
+
+terraform {
+	backend "s3" {
+		bucket         = "<%= application_name %>-terraform-state-storage"
+		key            = "terraform/terra-boi-cert"
+		region         = "us-east-2"
+		dynamodb_table = "<%= application_name %>-terraform-state-lock"
+		encrypt        = true
+	}
+}
+
+# ---------------------------------------------------------------------------------------------------------------------
+# 2. CERT
+# ---------------------------------------------------------------------------------------------------------------------
+
+resource "aws_acm_certificate_validation" "cert" {
+	certificate_arn = aws_acm_certificate.cert.arn
+}
+
+resource "aws_acm_certificate" "cert" {
+	domain_name       = "*.${var.domain_name}"
+	subject_alternative_names = ["${var.domain_name}"]
+	validation_method = "DNS"
+}

data/lib/generators/terra_boi/templates/cert/var.tf.erb

@@ -0,0 +1,15 @@
+# -----------------------------
+# 1. GENERAL
+# -----------------------------
+
+# Optional
+
+variable "region" {
+	type    = string
+	default = "us-east-2"
+}
+
+variable "domain_name" {
+	type    = string
+	default = "<%= class_options[:domain_name] %>"
+}

data/lib/generators/terra_boi/templates/data_storage_config.erb

@@ -1,31 +1,31 @@
 test:
   service: Disk
-  root: <%%= Rails.root.join("tmp/storage") %>
+  root: <%= Rails.root.join("tmp/storage") %>
 
 local:
   service: Disk
-  root: <%%= Rails.root.join("storage") %>
+  root: <%= Rails.root.join("storage") %>
 
 # Use rails credentials:edit to set the AWS secrets (as aws:access_key_id|secret_access_key)
 amazon:
   service: S3
-  access_key_id: <%%= ENV["AWS_ACCESS_KEY_ID"] %>
-  secret_access_key: <%%= ENV["AWS_SECRET_ACCESS_KEY"] %>
+  access_key_id: <%= ENV["AWS_ACCESS_KEY_ID"] %>
+  secret_access_key: <%= ENV["AWS_SECRET_ACCESS_KEY"] %>
   region: us-east-2
-  bucket: <%= application_name %>-<%%= ENV["INFRASTRUCTURE_ENV"] %>-web-assets
+  bucket: testsweet-<%= ENV["INFRASTRUCTURE_ENV"] %>-web-assets-assets
 
 # Remember not to checkin your GCS keyfile to a repository
 # google:
 #   service: GCS
 #   project: your_project
-#   credentials: <%%= Rails.root.join("path/to/gcs.keyfile") %>
+#   credentials: <%= Rails.root.join("path/to/gcs.keyfile") %>
 #   bucket: your_own_bucket
 
 # Use rails credentials:edit to set the Azure Storage secret (as azure_storage:storage_access_key)
 # microsoft:
 #   service: AzureStorage
 #   storage_account_name: your_account_name
-#   storage_access_key: <%%= Rails.application.credentials.dig(:azure_storage, :storage_access_key) %>
+#   storage_access_key: <%= Rails.application.credentials.dig(:azure_storage, :storage_access_key) %>
 #   container: your_container_name
 
 # mirror:

data/lib/generators/terra_boi/templates/ecr/ecs_role.tf.erb

@@ -0,0 +1,41 @@
+# ---------------------------------------------------------------------------------------------------------------------
+# 1. ECS IAM ROLE
+# ---------------------------------------------------------------------------------------------------------------------
+
+resource "aws_iam_role_policy" "ecs_execution_role" {
+	name = "ecs_${var.app_name}_policy"
+	role = aws_iam_role.ecs_execution_role.id
+
+	policy = <<-EOF
+	{
+		"Version": "2012-10-17",
+		"Statement": [
+			{
+				"Effect": "Allow",
+				"Action": "*",
+				"Resource": "*"
+			}
+		]
+	}
+	EOF
+}
+
+resource "aws_iam_role" "ecs_execution_role" {
+	name = "ecs_${var.app_name}_execution_role"
+
+	assume_role_policy = <<-EOF
+	{
+		"Version": "2012-10-17",
+		"Statement": [
+			{
+				"Action": "sts:AssumeRole",
+				"Principal": {
+					"Service": "ecs-tasks.amazonaws.com"
+				},
+				"Effect": "Allow",
+				"Sid": ""
+			}
+		]
+	}
+	EOF
+}

data/lib/generators/terra_boi/templates/ecr/main.tf.erb

@@ -0,0 +1,26 @@
+provider "aws" {
+	version = "~> 2.0"
+	region  = var.region
+}
+
+# ---------------------------------------------------------------------------------------------------------------------
+# 1. STATE
+# ---------------------------------------------------------------------------------------------------------------------
+
+terraform {
+	backend "s3" {
+		bucket         = "<%= application_name %>-terraform-state-storage"
+		key            = "terraform/<%= config[:env] %>-state/terra-boi-ecr"
+		region         = "us-east-2"
+		dynamodb_table = "<%= application_name %>-terraform-state-lock"
+		encrypt        = true
+	}
+}
+
+# --------------------------------------
+# 2. ECR Repository
+# --------------------------------------
+
+resource "aws_ecr_repository" "ecr_repo" {
+	name = "${var.app_name}-ecr-repo"
+}

data/lib/generators/terra_boi/templates/ecr/output.tf.erb

@@ -0,0 +1,11 @@
+output "aws_region" {
+	value = var.region
+}
+
+output "ecr_repo_url" {
+	value = aws_ecr_repository.ecr_repo.repository_url
+}
+
+output "ecr_repo_name" {
+	value = aws_ecr_repository.ecr_repo.name
+}

data/lib/generators/terra_boi/templates/ecr/var.tf.erb

@@ -0,0 +1,15 @@
+# -----------------------------
+# 1. GENERAL
+# -----------------------------
+
+# Optional
+
+variable "region" {
+	type    = string
+	default = "us-east-2"
+}
+
+variable "app_name" {
+	type    = string
+	default = "<%= application_name %>"
+}

data/lib/generators/terra_boi/templates/{data_main.erb → env/data/main.tf.erb}

@@ -5,7 +5,7 @@
 terraform {
   backend "s3" {
     bucket         = "<%= application_name %>-terraform-state-storage"
-    key            = "terraform/<%= config[:env] %>-state/data"
+    key            = "terraform/<%= config[:env] %>-state/terra-boi-data"
     region         = "us-east-2"
     dynamodb_table = "<%= application_name %>-terraform-state-lock"
     encrypt        = true
@@ -20,7 +20,7 @@ variable "db_username" {}
 variable "db_password" {}
 
 module "db_and_s3" {
-  source = "github.com/charliereese/terraform_modules//data?ref=v0.0.24"
+  source = "github.com/charliereese/terraform_modules//data?ref=v0.0.27"
 
   env               = "<%= config[:env] %>"
   app_name          = "<%= application_name %>"

data/lib/generators/terra_boi/templates/{data_output.erb → env/data/output.tf.erb}

@@ -21,4 +21,4 @@ output "endpoint" {
 output "db_name" {
   value       = module.db_and_s3.db_name
   description = "The name of the database"
-}
+}

data/lib/generators/terra_boi/templates/env/ecs_cluster/ecs_cluster.tf.erb

@@ -0,0 +1,24 @@
+# --------------------------------------
+# 1. STATE
+# --------------------------------------
+
+terraform {
+	backend "s3" {
+		bucket         = "<%= application_name %>-terraform-state-storage"
+		key            = "terraform/<%= config[:env] %>-state/terra-boi-ecs-cluster"
+		region         = "us-east-2"
+		dynamodb_table = "<%= application_name %>-terraform-state-lock"
+		encrypt        = true
+	}
+}
+
+# --------------------------------------
+# 2. Cluster
+# --------------------------------------
+
+module "ecs_cluster" {
+	source = "../../lib/terraform_modules/ecs_cluster"
+
+	app_name    = "<%= application_name %>"
+	environment = "<%= config[:env] %>"
+}

data/lib/generators/terra_boi/templates/env/head_worker/ecs.tf.erb

@@ -0,0 +1,55 @@
+# --------------------------------------
+# 1. STATE
+# --------------------------------------
+
+terraform {
+  backend "s3" {
+    bucket         = "<%= application_name %>-terraform-state-storage"
+    key            = "terraform/<%= config[:env] %>-state/terra-boi-ecs-service-head-worker"
+    region         = "us-east-2"
+    dynamodb_table = "<%= application_name %>-terraform-state-lock"
+    encrypt        = true
+  }
+}
+
+# --------------------------------------
+# 2. Cluster
+# --------------------------------------
+
+module "head_worker" {
+  source = "../../lib/terraform_modules/ecs_worker"
+
+  app_name          = "<%= application_name %>"
+  environment       = "<%= config[:env] %>"
+  app_type          = "head_worker"
+  template_filename = "head_worker.json"
+  db_password = var.db_password
+  aws_access_key = var.aws_access_key
+  aws_secret_key = var.aws_secret_key
+  worker_task = {
+    memory        = 512
+    cpu           = 256
+    desired_count = 1 # Should always be 1. If increased, cron jobs will run multiple times. If you need more workers, create a new fargate task for your child_worker (using the same ecs_worker source) with the entrypoint ["sh", "-c", "rake db:migrate && rake jobs:work"]
+  }
+}
+
+output "ecs_service_name" {
+  value = module.head_worker.ecs_service_name
+}
+
+output "ecs_cluster_name" {
+  value = module.head_worker.ecs_cluster_name
+}
+
+variable "db_password" {
+  description = "The password for the database"
+  type        = string
+}
+
+variable "aws_access_key" {
+  type        = string
+}
+
+variable "aws_secret_key" {
+  type        = string
+}

data/lib/generators/terra_boi/templates/env/web_app/ecs.tf.erb

@@ -0,0 +1,59 @@
+# --------------------------------------
+# 1. STATE
+# --------------------------------------
+
+terraform {
+	backend "s3" {
+		bucket         = "<%= application_name %>-terraform-state-storage"
+		key            = "terraform/<%= config[:env] %>-state/terra-boi-ecs-service-web-app"
+		region         = "us-east-2"
+		dynamodb_table = "<%= application_name %>-terraform-state-lock"
+		encrypt        = true
+	}
+}
+
+# --------------------------------------
+# 2. Cluster
+# --------------------------------------
+
+module "web_app" {
+	source = "../../lib/terraform_modules/ecs_web_app"
+
+	app_name    = "<%= application_name %>"
+	environment = "<%= config[:env] %>"
+	app_type    = "web_app"
+	db_password = var.db_password
+	aws_access_key = var.aws_access_key
+	aws_secret_key = var.aws_secret_key
+	web_app_task = {
+		memory        = 512
+		cpu           = 256
+		desired_count = 2
+		port          = 3000
+	}
+}
+
+output "ecs_service_name" {
+	value = module.web_app.ecs_service_name
+}
+
+output "ecs_cluster_name" {
+	value = module.web_app.ecs_cluster_name
+}
+
+output "alb_dns" {
+	value = module.web_app.alb_dns
+}
+
+variable "db_password" {
+	description = "The password for the database"
+	type        = string
+}
+
+variable "aws_access_key" {
+	type        = string
+}
+
+variable "aws_secret_key" {
+	type        = string
+}

data/lib/generators/terra_boi/templates/lib/scripts/push_to_ecr.sh.erb

@@ -0,0 +1,25 @@
+# Requires AWS cli >= v2.x.x
+# https://docs.aws.amazon.com/cli/latest/userguide/install-cliv2.html
+
+SCRIPT_DIR=$(realpath "$(dirname "${BASH_SOURCE[0]}")")
+cd $SCRIPT_DIR/../../ecr
+
+# Retrieve an authentication token and authenticate your Docker client to your registry.
+AWS_REGION=$(terraform output aws_region)
+AWS_ECR_REPO_URL=$(terraform output ecr_repo_url)
+AWS_ECR_REPO_NAME=$(terraform output ecr_repo_name)
+aws ecr get-login-password --region $AWS_REGION | docker login --username AWS --password-stdin $AWS_ECR_REPO_URL
+
+# Build your Docker image using the following command
+DOCKERFILE_PATH="$SCRIPT_DIR/../../../."
+if ! docker build -t $AWS_ECR_REPO_NAME $DOCKERFILE_PATH; then 
+	echo "TERRA_BOI | Command failed. Pruning Docker memory then retrying!"
+	echo "TERRA_BOI | Pruning may take a couple minutes..."
+	docker system prune -a && docker build -t $AWS_ECR_REPO_NAME $DOCKERFILE_PATH
+fi
+
+# After the build completes, tag your image so you can push the image to this repository:
+docker tag $AWS_ECR_REPO_NAME:latest $AWS_ECR_REPO_URL:latest
+
+# Run the following command to push this image to your newly created AWS repository:
+docker push $AWS_ECR_REPO_URL:latest