Page MenuHomePhabricator
Files F3340322

D12868.id42736.diff
No OneTemporary
Actions

D12868.id42736.diff
View Options

diff --git a/services/terraform/self-host/aws_ecs.tf b/services/terraform/self-host/keyserver_cluster.tf
rename from services/terraform/self-host/aws_ecs.tf
rename to services/terraform/self-host/keyserver_cluster.tf
--- a/services/terraform/self-host/aws_ecs.tf
+++ b/services/terraform/self-host/keyserver_cluster.tf
@@ -29,3 +29,36 @@
cluster_name = aws_ecs_cluster.keyserver_cluster.name
capacity_providers = ["FARGATE"]
}
+
+resource "aws_security_group" "keyserver_service" {
+ name = "keyserver-service-ecs-sg"
+ vpc_id = local.vpc_id
+
+ # Allow all inbound traffic on port 3000
+ ingress {
+ from_port = 3000
+ to_port = 3000
+ protocol = "tcp"
+ cidr_blocks = ["0.0.0.0/0"]
+ }
+
+ ingress {
+ description = "Allow inbound traffic from any IPv6 address"
+ from_port = 3000
+ to_port = 3000
+ protocol = "tcp"
+ ipv6_cidr_blocks = ["::/0"]
+ }
+
+ # Allow all outbound traffic
+ egress {
+ from_port = 0
+ to_port = 0
+ protocol = "-1"
+ cidr_blocks = ["0.0.0.0/0"]
+ }
+
+ lifecycle {
+ create_before_destroy = true
+ }
+}
diff --git a/services/terraform/self-host/keyserver_primary.tf b/services/terraform/self-host/keyserver_primary.tf
--- a/services/terraform/self-host/keyserver_primary.tf
+++ b/services/terraform/self-host/keyserver_primary.tf
@@ -114,36 +114,3 @@
rollback = true
}
}
-
-resource "aws_security_group" "keyserver_service" {
- name = "keyserver-service-ecs-sg"
- vpc_id = local.vpc_id
-
- # Allow all inbound traffic on port 3000
- ingress {
- from_port = 3000
- to_port = 3000
- protocol = "tcp"
- cidr_blocks = ["0.0.0.0/0"]
- }
-
- ingress {
- description = "Allow inbound traffic from any IPv6 address"
- from_port = 3000
- to_port = 3000
- protocol = "tcp"
- ipv6_cidr_blocks = ["::/0"]
- }
-
- # Allow all outbound traffic
- egress {
- from_port = 0
- to_port = 0
- protocol = "-1"
- cidr_blocks = ["0.0.0.0/0"]
- }
-
- lifecycle {
- create_before_destroy = true
- }
-}

File Metadata

Mime Type
text/plain
Expires
Fri, Nov 22, 9:36 PM (5 h, 56 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
2565285
Default Alt Text
D12868.id42736.diff (2 KB)

Event Timeline