junte/Model
1
0
Fork 0
mirror of https://github.com/Hestia-Homes/Model.git synced 2026-06-30 13:10:47 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Updating vpc definition for database

Browse source
This commit is contained in:
Khalim Conn-Kowlessar 2023-07-10 13:20:59 +01:00
parent a0ee39a2f9
commit 4877db46f8
1 changed files with 27 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

27
infrastructure/terraform/main.tf
View file

@ -29,6 +29,32 @@ data "aws_secretsmanager_secret_version" "db_credentials" {
secret_id = data.aws_secretsmanager_secret.db_credentials.id secret_id = data.aws_secretsmanager_secret.db_credentials.id
} }
# Default VPC
data "aws_default_vpc" "default" {}
# For MVP, we allow all inbound traffic to the DB - this will need to be changed later; we'll likely
# need to re-deploy the frontend to AWS so that it's within the same VPC as the DB
resource "aws_security_group" "allow_db" {
name = "allow_tls"
description = "Allow TLS inbound traffic"
vpc_id = data.aws_default_vpc.default.id
ingress {
# TLS (change to whatever ports you need)
from_port = 5432
to_port = 5432
protocol = "tcp"
cidr_blocks = ["0.0.0.0/0"]
}
egress {
from_port = 0
to_port = 0
protocol = "-1"
cidr_blocks = ["0.0.0.0/0"]
}
}
resource "aws_db_instance" "default" { resource "aws_db_instance" "default" {
allocated_storage = var.allocated_storage allocated_storage = var.allocated_storage
engine = "postgres" engine = "postgres"
@ -39,6 +65,7 @@ resource "aws_db_instance" "default" {
password = jsondecode(data.aws_secretsmanager_secret_version.db_credentials.secret_string)["db_assessment_model_password"] password = jsondecode(data.aws_secretsmanager_secret_version.db_credentials.secret_string)["db_assessment_model_password"]
parameter_group_name = "default.postgres14" parameter_group_name = "default.postgres14"
skip_final_snapshot = true skip_final_snapshot = true
vpc_security_group_ids = [aws_security_group.allow_db.id]
lifecycle { lifecycle {
prevent_destroy = true prevent_destroy = true
} }