Allow the log retention period to be configured

Merge pull request #36 from skyscrapers/log_retention

Allow to configure log_retention_period

Encrypt EBS volume by default

Merge pull request #35 from skyscrapers/ebs_encrypted

Encrypt Teleport EC2 instance by default per skyscrapers/engineering#524

Auto rotate SSL certificate

Merge pull request #33 from skyscrapers/cert_renew_cron

Add cronjob to renew certificate per skyscrapers/engineering#435

Switch to Amazon Linux 2 for the teleport server

Make teleport compatible with Amazon linux 2 (#32)

Also:

- make cloudwatch group names dynamic so multiple instances of the module can be deployed
- remove the need for the is_ebs_optimised module. Most new instances are ebs optimized by default now

Requires https://github.com/skyscrapers/server-images/pull/14
As per https://github.com/skyscrapers/engineering/issues/363

5.1.3

Block public S3 access completely (#31)

Add teleport_cluster_name output

5.1.2

Add cluster name to the outputs

Fix EIP dns name for us-east-1

Use attribute from the EIP to get the public dns (#30)

DNS records in us-east-1 look different, as they don't include the region part. Now that the aws_eip resource provides with the `public_dns` attribute, we'll just use that instead of the current "hack"

Add teleport_version variable

Add teleport_version variable (#29)

Will be used in the teleport-stacks pipeline

Fix iam permissions

Fix iam permissions to access session recordings (#28)

Also adjusted variable defaults

As per https://github.com/gravitational/teleport/issues/3095

5.0.4

Update ACME url to v2