Automated WordPress deployment on AWS orchestrated through Terraform while trying to stick with the AWS free plan.
Configuration management is done via Ansible.
To securely manage sensitive data like SSH private keys, this setup integrates HashiCorp Vault. Vault stores secrets centrally, and Ansible fetches these secrets dynamically during deployment, keeping credentials out of the codebase and improving security. The name of the database and the user credentials for the wordpress installation are also stored in Vault KV v2 secrets engine.
- Move Mariadb to RDS db.t3.micro