zsiegel / do-terraform-hashistack

Demo repo for playing with the Hashicorp stack in Digital Ocean

Hashistack on Digital Ocean

This repo is a playground for creating a full Hashistack environment with Terraform on Digital ocean.

• Nomad cluster
  • Cloud-init
  • Gossip encryption
  • Mutual TLS
• Consul cluster
• Vault cluster
• Add firewall to block all incoming public traffic except SSH
  • Consider a bastion host

Running

Create a local.tfvars file with your relevant variables.

At a minimum you must provide a digital ocean API token and file paths to a SSH key that can be used for provisioning.

Then you can run the following.

# Download the necessary providers
make init

# Create a plan for the stack
make plan

# Apply any changes to the stack
make apply

# Tear down the stack
make destroy