iac: terraform refactor

[noahehall]

C

• might as well finish the entire hashcorp saga while we're here

T

• refactor
  • nirvai-core
    • terraform test > aws: infra now split between core + web
  • nirvai-web
    • terraform test > aws: infra now split between core + web
• new
  • terraform nomad provider
  • terraform consul integration

A

• stay away from terraform + vault integration and continue to use script.vault.sh for bootstrapping vault

Interacting with Vault from Terraform causes 
any secrets that you read and write to be 
persisted in both Terraform's state file and 
in any generated plan files. For any 
Terraform module that reads or writes Vault
 secrets, these files should be treated as 
sensitive and protected accordingly.