Merge pull request #36 from hashicorp/bf-add-port-80

Open up port 80 and have the LB forward to 443

Author: Brandon Ferguson

modules/common-user-vpc/security_groups.tf

@@ -52,6 +52,16 @@ resource "aws_security_group" "allow_ptfe" {
     cidr_blocks = ["0.0.0.0/0"]
   }
 
+  ingress {
+    description = "http to ptfe application"
+
+    protocol  = "tcp"
+    from_port = 80
+    to_port   = 80
+
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
   ingress {
     description = "https to ptfe application"
 

modules/lb/elb.tf

@@ -37,6 +37,22 @@ resource "aws_lb_target_group" "admin" {
   }
 }
 
+resource "aws_lb_listener" "http" {
+  load_balancer_arn = "${aws_lb.ptfe.arn}"
+  port              = "80"
+  protocol          = "HTTP"
+
+  default_action {
+    type = "redirect"
+
+    redirect {
+      port        = "443"
+      protocol    = "HTTPS"
+      status_code = "HTTP_301"
+    }
+  }
+}
+
 resource "aws_lb_listener" "https" {
   load_balancer_arn = "${aws_lb.ptfe.arn}"
   port              = "443"

modules/lb/security-groups.tf

@@ -39,6 +39,14 @@ resource "aws_security_group" "lb_public" {
     cidr_blocks = ["0.0.0.0/0"]
   }
 
+  ingress {
+    description = "http to ptfe application"
+    protocol    = "tcp"
+    from_port   = 80
+    to_port     = 80
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
   ingress {
     description = "https to ptfe application"
     protocol    = "tcp"