Skip to content

Latest commit

 

History

History
77 lines (49 loc) · 1.84 KB

README.md

File metadata and controls

77 lines (49 loc) · 1.84 KB
Raw

Hashistack on Scaleway

Terraform module to deploy Consul, Nomad, Vault onto Scaleway

This module is currently under construction. I would love assistance. Please reach out.

Features

  • deploys a consul, vault, nomad, docker cluster to scaleway
  • configures firewalls correctly
  • uses local TLS via tls_mode=local
    • uses mutual TLS for consul and vault
    • uses mutual TLS for nomad
  • uses Cloudflare's Argo Tunnel via tls_mode=cloudflared
  • uses fabio or traefik

Preparation

If you are using MacOS, you will need to do the following:

brew install coreutils
npm i -g json

Servers

Origin Server:

  • Creates consul server + vault server
  • Initialises consul
  • Initialises vault
  • Generates nomad vault configuration
  • Generates TLS certificates via vault pki
  • Restarts consul and vault with TLS

Master Server:

  • Creates consul server + nomad server

Slave Server:

  • Creates consul agent + docker + nomad agent

Usage

Refer to ./example/main.tf

Debugging

If you need to debug DNS:

sudo yum install -y net-tools # ifconfig
sudo yum install -y bind-utils # dig
netstat -lnp
netstat -rn
route -n
dig consul.service.consul
dig @127.0.0.1 -p 8600 consul.service.consul SRV

License

Unless stated otherwise all works are:

and licensed under: