dbvm.tf

resource "aws_security_group" "dbsg" {
    vpc_id = "${aws_vpc.vpc.id}"
    
    egress {
        from_port = 0
        to_port = 0
        protocol = -1
        cidr_blocks = ["0.0.0.0/0"]
    }    
    ingress {
        from_port = 22
        to_port = 22
        protocol = "tcp"        
        cidr_blocks = ["0.0.0.0/0"]
    }   
    ingress {
        from_port = 3306
        to_port = 3306
        protocol = "tcp"
        security_groups = [aws_security_group.websg.id]
    }    


}


resource "aws_instance" "db" {
    ami = "ami-067f8db0a5c2309c0"
    instance_type = "t2.small" 
    subnet_id = "${aws_subnet.private-sub.id}"
    vpc_security_group_ids = ["${aws_security_group.dbsg.id}"]
    key_name = "tko-cfox-key"
    user_data_replace_on_change = true
    user_data = <<EOF
#!/bin/bash
apt-get update -y

DB_PASS=Password1
DB_USER=root
DB_NAME=test

# Preparing MYSQL for silent installation
export DEBIAN_FRONTEND="noninteractive"
echo "mysql-server mysql-server/root_password password $DB_PASS" | debconf-set-selections
echo "mysql-server mysql-server/root_password_again password $DB_PASS" | debconf-set-selections


# Installing MYSQL
apt-get install mysql-server -y
#apt-get install mysql-client -y


# Setting up local permission file
mkdir /home/pk;
bash -c "cat >> /home/pk/my.cnf" <<EOL
[client]
## for local server use localhost
host=localhost
user=$DB_USER
password=$DB_PASS

[mysql]
pager=/usr/bin/less
EOL

# Creating database
mysql --defaults-extra-file=/home/pk/my.cnf << EOL
CREATE DATABASE $DB_NAME;
EOL

# Configuring Remote Connection Access: updating sql config to not bind to a specific address
sed -i 's/bind-address/#bind-address/g' /etc/mysql/mysql.conf.d/mysqld.cnf

# granting db access
mysql --defaults-extra-file=/home/pk/my.cnf << EOL
GRANT ALL ON *.* TO $DB_USER@'%' IDENTIFIED BY "$DB_PASS";
EOL

mysql --defaults-extra-file=/home/pk/my.cnf -e "FLUSH PRIVILEGES;"

systemctl restart mysql.service

EOF

    tags = {
        Name = "DB-VM"
    }

 

}