moving folders around

2021-03-03 17:30:57 -08:00
parent 1dd1969ac8
commit 8cdbb0d493
11 changed files with 0 additions and 0 deletions
--- a/deploy/aws/lib/deploy-stack.ts
+++ b/deploy/aws/lib/deploy-stack.ts
@@ -0,0 +1,64 @@
+import * as cdk from '@aws-cdk/core';
+
+// import dependencies for ECS and building a VPC
+import * as ec2 from "@aws-cdk/aws-ec2";
+import * as ecs from "@aws-cdk/aws-ecs";
+import * as ecs_patterns from "@aws-cdk/aws-ecs-patterns";
+
+// tls certificate with ACM
+import * as route53 from '@aws-cdk/aws-route53';
+import * as acm from '@aws-cdk/aws-certificatemanager';
+export class DeployStack extends cdk.Stack {
+  constructor(scope: cdk.Construct, id: string, hostedZoneID: string, domainName: string, props?: cdk.StackProps) {
+    super(scope, id, props);
+    // create vpc with 3 subnets
+    const vpc = new ec2.Vpc(this, "LocalTunnelVPC", {
+      maxAzs: 3
+    })
+    // create the ecs cluster
+    const cluster = new ecs.Cluster(this, "LocalTunnelCluster", {
+      vpc: vpc
+    })
+    // create acm cert
+    const DNSZone = route53.HostedZone.fromHostedZoneAttributes(this, 'HostedZone', {
+      zoneName: domainName,
+      hostedZoneId: hostedZoneID
+    })
+    // add wildcard CNAME
+    new route53.CnameRecord(this, 'CnameRecordWildcard', {
+      zone: DNSZone,
+      recordName: "*",
+      domainName: domainName
+    })
+    const cert = new acm.Certificate(this, 'Cert', {
+      domainName: domainName,
+      subjectAlternativeNames: ["*."+domainName],
+      validation: acm.CertificateValidation.fromDns(DNSZone)
+    })
+    
+    
+
+    // create LBed Fargate service
+    let localtunnelsvc = new ecs_patterns.ApplicationLoadBalancedFargateService(this, "LocalTunnelService", {
+      cluster: cluster,
+      cpu: 512,
+      desiredCount: 1,
+      taskImageOptions: {
+        image: ecs.ContainerImage.fromRegistry("defunctzombie/localtunnel-server:latest")
+        
+      },
+      memoryLimitMiB: 2048,
+      publicLoadBalancer: true,
+      certificate: cert,
+      redirectHTTP: true,
+      recordType: ecs_patterns.ApplicationLoadBalancedServiceRecordType.ALIAS,
+      listenerPort: 443,
+      domainName: domainName,
+      domainZone: DNSZone
+    })
+    // set health route
+    localtunnelsvc.targetGroup.configureHealthCheck({
+      path: "/api/status"
+    })
+  }
+}