Cloud Deployment

terraform {
  required_providers {
    aws = {
      source  = "hashicorp/aws"
      version = "~> 5.0"
    }
  }
}

provider "aws" {
  region = "us-east-1"
}

# VPC for isolation
resource "aws_vpc" "eth_node" {
  cidr_block           = "10.0.0.0/16"
  enable_dns_hostnames = true
  enable_dns_support   = true

  tags = {
    Name = "eth-node-vpc"
  }
}

# Subnet
resource "aws_subnet" "eth_node" {
  vpc_id                  = aws_vpc.eth_node.id
  cidr_block              = "10.0.1.0/24"
  availability_zone       = "us-east-1a"
  map_public_ip_on_launch = true
}

# Security Group
resource "aws_security_group" "eth_node" {
  name        = "eth-node-sg"
  description = "Security group for Ethereum node"
  vpc_id      = aws_vpc.eth_node.id

  # SSH
  ingress {
    from_port   = 22
    to_port     = 22
    protocol    = "tcp"
    cidr_blocks = ["YOUR_IP/32"]
  }

  # P2P
  ingress {
    from_port   = 30303
    to_port     = 30303
    protocol    = "tcp"
    cidr_blocks = ["0.0.0.0/0"]
  }

  # RPC (restrict in production)
  ingress {
    from_port   = 8545
    to_port     = 8545
    protocol    = "tcp"
    cidr_blocks = ["10.0.0.0/16"]
  }

  egress {
    from_port   = 0
    to_port     = 0
    protocol    = "-1"
    cidr_blocks = ["0.0.0.0/0"]
  }
}

# EC2 Instance
resource "aws_instance" "eth_node" {
  ami           = "ami-0c7217cdde317cfec"  # Ubuntu 22.04
  instance_type = "i3en.xlarge"

  subnet_id                   = aws_subnet.eth_node.id
  vpc_security_group_ids      = [aws_security_group.eth_node.id]
  associate_public_ip_address = true

  root_block_device {
    volume_size = 100
    volume_type = "gp3"
  }

  # NVMe instance storage for chain data
  # i3en.xlarge has 1x 1.25TB NVMe

  user_data = <<-EOF
              #!/bin/bash
              apt-get update
              apt-get install -y docker.io docker-compose
              systemctl enable docker
              systemctl start docker

              # Format and mount NVMe
              mkfs.ext4 /dev/nvme1n1
              mkdir -p /data
              mount /dev/nvme1n1 /data
              echo '/dev/nvme1n1 /data ext4 defaults 0 0' >> /etc/fstab
              EOF

  tags = {
    Name = "eth-node"
  }
}

output "public_ip" {
  value = aws_instance.eth_node.public_ip
}