Battle-tested infrastructure as code — from VPC networking to CI/CD pipelines. Each module is built from real production experience managing 1000+ customer subdomains.
8
Modules
MIT
Licensed
TF 1.5+
Compatible
AWS 5.0+
Provider
Multi-AZ VPC with public, private, and database subnets. NAT Gateway (single or HA), DB subnet group, and locked-down default security group.
Launch a production-ready EC2 with Nginx pre-configured in one apply. Includes SSL via Certbot, security hardening, fail2ban, and custom HTML support.
RDS in private subnets with AES-256 encryption, gp3 storage, automated backups, Performance Insights, and parameter group support.
EKS cluster with managed node groups, IRSA (IAM Roles for Service Accounts), OIDC provider, cluster logging, and spot instance support.
Serverless container deployment with auto-scaling, deployment circuit breaker with rollback, secrets management, and Container Insights.
Static website hosting with S3, CloudFront CDN, custom domain, auto-provisioned SSL, and SPA routing support for React/Vue/Angular.
Complete CI/CD infrastructure — ECR with image scanning, GitHub Actions OIDC (no access keys), and ready-to-use workflow templates for ECS and EKS.
Automatically stop dev/staging EC2 and RDS at night, start in the morning. Lambda-based scheduling with EventBridge cron — save up to 65%.
source = "github.com/akshayghalme/
terraform-vpc-production"
name = "my-app"
vpc_cidr = "10.0.0.0/16"
availability_zones = [...]
$ terraform init
$ terraform plan
$ terraform apply
Every module is based on infrastructure I've built and maintained at scale — managing 1000+ customer subdomains with 99.9% uptime and ~80% cost reduction.