jfbarryli / infra

Infrastructure to support my personal projects.

Infrastructure

The infrastructure here are created to support my personal projects.

This also support an on-demand remote development setup.

The remote development machine can be configured, and turned On/Off here via GitHub Actions.

Projects

Travel Data Pipeline

Github

Personal Website

Github Barryli.ca

Finite Element Analysis Ui

Github

Demo

Finite Element Analysis Api

Github

Demo

Ontario Vaccine Alert

Github

License

See LICENSE for more information.

infra's Issues

Ecs module refactor

Design Objectives

• Easily add new service to run on a ECS cluster
• Dynamic port mapping
• Service load balancing

Notes

• Probably need to separate out the ecs resources and service specific resources

Look into bucket policy issue in agw-s3-proxy

Look into why the rule for checking for x-amz-server-side-encryption and x-amz-acl is causing Access Denied error.

Design and implement a traditional 3 tier architecture

Design Objectives

• Traditional 3 tier architecture: Public, Private, and Intra
• Public facing load balancer
• Private backend services
• Internal reachable only data layer

Terragrunt

Refactor to use Terragrunt.

List of todos

• Healthcheck module
• Remote state
• vault
• Domain validation and email forwarding
• Tagging
• Optional 3 tier architecture
• Single variable switch between 3 tier/public architecture
• Container module logging
• Refactor alb and auto-scaling groups
• Container networking
• Rethink task/container/instance security groups
• Env prefix/suffix
• Setup cloudwatch alarms
• Access logs: alb, ecs, s3...
• Set up testing
• Update alb to be optional
• Ecs service autoscaling
• Checkov security issues
• Terragrunt

Fix security issues identified by Checkov