Feat(infra): 인프라 메인 tf 설정

Author: devbattery

infra/main.tf

@@ -0,0 +1,183 @@
+terraform {
+  required_providers {
+    google = {
+      source  = "hashicorp/google"
+      version = ">= 5.0"
+    }
+  }
+  backend "gcs" {
+    # [주의] 본인의 버킷 이름으로 유지하세요!
+    bucket  = "stiky-terraform-state-wonjun"
+    prefix  = "prod"
+  }
+}
+
+provider "google" {
+  project = var.project_id
+  region  = var.region
+}
+
+# 0. VPC 네트워크 설정 (Private IP 사용을 위한 필수 설정)
+# 구글 서비스용 내부 IP 대역 예약
+resource "google_compute_global_address" "private_ip_address" {
+  name          = "private-ip-address"
+  purpose       = "VPC_PEERING"
+  address_type  = "INTERNAL"
+  prefix_length = 16
+  network       = "default"
+}
+
+# VPC와 구글 서비스 간 피어링 연결
+resource "google_service_networking_connection" "private_vpc_connection" {
+  network                 = "default"
+  service                 = "servicenetworking.googleapis.com"
+  reserved_peering_ranges = [google_compute_global_address.private_ip_address.name]
+}
+
+# 1. Artifact Registry (이미지 저장소)
+resource "google_artifact_registry_repository" "repo" {
+  location      = var.region
+  repository_id = "stiky-repo"
+  format        = "DOCKER"
+}
+
+# 2. Cloud SQL (MySQL)
+resource "google_sql_database_instance" "master" {
+  name             = "stiky-mysql-prod-${random_id.suffix.hex}"
+  database_version = "MYSQL_8_0"
+  region           = var.region
+  deletion_protection = true
+
+  settings {
+    tier = "db-f1-micro"
+    ip_configuration {
+      ipv4_enabled    = false
+      private_network = "projects/${var.project_id}/global/networks/default"
+    }
+  }
+
+  # [중요] 네트워크 연결이 끝난 뒤에 DB를 만들어야 에러가 안 남
+  depends_on = [google_service_networking_connection.private_vpc_connection]
+}
+
+resource "random_id" "suffix" {
+  byte_length = 4
+}
+
+resource "google_sql_database" "database" {
+  name     = "stiky"
+  instance = google_sql_database_instance.master.name
+}
+
+resource "google_sql_user" "users" {
+  name     = "wonjun"
+  instance = google_sql_database_instance.master.name
+  password = "temp-password"
+}
+
+# 3. Redis (Memorystore)
+resource "google_redis_instance" "cache" {
+  name           = "stiky-redis-prod"
+  memory_size_gb = 1
+  region         = var.region
+
+  # Redis도 Private IP를 쓰므로 네트워크 연결에 의존성을 둠
+  depends_on = [google_service_networking_connection.private_vpc_connection]
+}
+
+# 4. Cloud Run (애플리케이션)
+resource "google_cloud_run_v2_service" "default" {
+  name     = "stiky-api"
+  location = var.region
+  ingress  = "INGRESS_TRAFFIC_ALL"
+
+  template {
+    vpc_access{
+      network_interfaces {
+        network = "default"
+        subnetwork = "default"
+      }
+      egress = "ALL_TRAFFIC"
+    }
+
+    containers {
+      image = "${var.region}-docker.pkg.dev/${var.project_id}/${google_artifact_registry_repository.repo.name}/stiky-api:latest"
+
+      ports { container_port = 8080 }
+
+      env {
+        name  = "SPRING_PROFILES_ACTIVE"
+        value = "prod"
+      }
+      env {
+        name  = "DB_HOST"
+        value = google_sql_database_instance.master.private_ip_address
+      }
+      env {
+        name  = "DB_NAME"
+        value = google_sql_database.database.name
+      }
+      env {
+        name  = "DB_USER"
+        value = google_sql_user.users.name
+      }
+      env {
+        name  = "REDIS_HOST"
+        value = google_redis_instance.cache.host
+      }
+
+      env {
+        name = "DB_PASS"
+        value_source {
+          secret_key_ref {
+            secret  = "DB_PASS"
+            version = "latest"
+          }
+        }
+      }
+      env {
+        name = "JWT_SECRET"
+        value_source {
+          secret_key_ref {
+            secret  = "JWT_SECRET"
+            version = "latest"
+          }
+        }
+      }
+      env {
+        name = "GOOGLE_CLIENT_ID"
+        value_source {
+          secret_key_ref {
+            secret  = "GOOGLE_CLIENT_ID"
+            version = "latest"
+          }
+        }
+      }
+      env {
+        name = "GOOGLE_CLIENT_SECRET"
+        value_source {
+          secret_key_ref {
+            secret  = "GOOGLE_CLIENT_SECRET"
+            version = "latest"
+          }
+        }
+      }
+    }
+  }
+
+  lifecycle {
+    ignore_changes = [
+      client,
+      client_version,
+      template[0].containers[0].image
+    ]
+  }
+}
+
+# 5. 도메인 매핑
+resource "google_cloud_run_domain_mapping" "default" {
+  location = var.region
+  name     = "www.stiky.site"
+  metadata { namespace = var.project_id }
+  spec { route_name = google_cloud_run_v2_service.default.name }
+}

infra/variables.tf

@@ -0,0 +1,10 @@
+variable "project_id" {
+  description = "GCP Project ID"
+  type        = string
+}
+
+variable "region" {
+  description = "GCP Region"
+  type        = string
+  default     = "asia-northeast3"
+}