Day 3 - Demostack Draft
(This is going to be uninspired )
The demostack is a “Hashistack the hard way” project, it sets up Consul, Vault and Nomad with a variable amount of Servers and Workers . we also have a Load Balanced front end for Vault and a Load Balanced front end for Fabio (Consul Load Balancer).
this is set up only using Terraform and Cloud Init scripts; Not only is this the hard way, it is also the wrong way. If doing this in production , Packer and optionally an orchestrator should be used.
Architecture overview:
<Insert here a cool picture of the architecture>
Consul:
Consul is installed and configured on all the servers and workers using cloud auto connect. It is also configured as DNS using DNSMAQ for any request going to port 8500 or *.consul
Vault:
Vault is configured on the servers and the vault binaries are installed on the workers. Vault is set up using the Clouds Auto Unseal, set up an initial KV secret and a PKI secret for NGINX .
Nomad
Nomad is Installed and configured on all the servers and workers. Fabio and Hashi-ui (I like it ) are set up automatically, nomad also starts a couple of jobs from this repo: https://github.com/GuyBarros/nomad_jobs
Variables:
(thats enought for today )