viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

update graphql backdoor secret and remove some unused env variables

Browse source
This commit is contained in:
viktorbarzin 2023-03-26 14:42:17 +01:00
parent 3691f149af
commit ea40e5c21c
3 changed files with 25 additions and 32 deletions
Download patch file Download diff file Expand all files Collapse all files

22
main.tf
View file

@ -55,9 +55,9 @@ variable "finance_app_imap_host" {}
variable "finance_app_imap_user" {} variable "finance_app_imap_user" {}
variable "finance_app_imap_password" {} variable "finance_app_imap_password" {}
variable "finance_app_imap_directory" {} variable "finance_app_imap_directory" {}
variable "finance_app_monzo_registered_accounts_json" {}
variable "finance_app_oauth_google_client_id" {} variable "finance_app_oauth_google_client_id" {}
variable "finance_app_oauth_google_client_secret" {} variable "finance_app_oauth_google_client_secret" {}
variable "finance_app_graphql_api_secret" {}
variable "ansible_prefix" { variable "ansible_prefix" {
default = "ANSIBLE_VAULT_PASSWORD_FILE=~/.ansible/vault_pass.txt ansible-playbook -i playbook/hosts.yaml playbook/linux.yml -t linux/initial_setup" default = "ANSIBLE_VAULT_PASSWORD_FILE=~/.ansible/vault_pass.txt ansible-playbook -i playbook/hosts.yaml playbook/linux.yml -t linux/initial_setup"
@ -269,14 +269,14 @@ module "kubernetes_cluster" {
shadowsocks_password = var.shadowsocks_password shadowsocks_password = var.shadowsocks_password
# finance app # finance app
finance_app_monzo_client_id = var.finance_app_monzo_client_id finance_app_monzo_client_id = var.finance_app_monzo_client_id
finance_app_monzo_client_secret = var.finance_app_monzo_client_secret finance_app_monzo_client_secret = var.finance_app_monzo_client_secret
finance_app_sqlite_db_path = var.finance_app_sqlite_db_path finance_app_sqlite_db_path = var.finance_app_sqlite_db_path
finance_app_imap_host = var.finance_app_imap_host finance_app_imap_host = var.finance_app_imap_host
finance_app_imap_user = var.finance_app_imap_user finance_app_imap_user = var.finance_app_imap_user
finance_app_imap_password = var.finance_app_imap_password finance_app_imap_password = var.finance_app_imap_password
finance_app_imap_directory = var.finance_app_imap_directory finance_app_imap_directory = var.finance_app_imap_directory
finance_app_monzo_registered_accounts_json = var.finance_app_monzo_registered_accounts_json finance_app_oauth_google_client_id = var.finance_app_oauth_google_client_id
finance_app_oauth_google_client_id = var.finance_app_oauth_google_client_id finance_app_oauth_google_client_secret = var.finance_app_oauth_google_client_secret
finance_app_oauth_google_client_secret = var.finance_app_oauth_google_client_secret finance_app_graphql_api_secret = var.finance_app_graphql_api_secret
} }

9
modules/kubernetes/finance_app/main.tf
View file

@ -9,12 +9,9 @@ variable "imap_directory" {}
variable "prod_graphql_endpoint" { variable "prod_graphql_endpoint" {
default = "https://finance.viktorbarzin.me/graphql" default = "https://finance.viktorbarzin.me/graphql"
} }
variable "monzo_registered_accounts_json" {}
variable "oauth_google_client_id" {} variable "oauth_google_client_id" {}
variable "oauth_google_client_secret" {} variable "oauth_google_client_secret" {}
variable "graphql_api_secret" { variable "graphql_api_secret" {}
default = "kekerino"
}
resource "kubernetes_namespace" "finance_app" { resource "kubernetes_namespace" "finance_app" {
@ -186,10 +183,6 @@ resource "kubernetes_deployment" "finance_app_backend_webhook_handler" {
container { container {
image = "viktorbarzin/finance-app-backend-webhook-handler" image = "viktorbarzin/finance-app-backend-webhook-handler"
name = "finance-app-backend-webhook-handler" name = "finance-app-backend-webhook-handler"
env {
name = "MONZO_REGISTERED_ACCOUNTS_JSON"
value = var.monzo_registered_accounts_json
}
env { env {
name = "GRAPHQL_ENDPOINT" name = "GRAPHQL_ENDPOINT"
value = var.prod_graphql_endpoint value = var.prod_graphql_endpoint

26
modules/kubernetes/main.tf
View file

@ -43,9 +43,9 @@ variable "finance_app_imap_host" {}
variable "finance_app_imap_user" {} variable "finance_app_imap_user" {}
variable "finance_app_imap_password" {} variable "finance_app_imap_password" {}
variable "finance_app_imap_directory" {} variable "finance_app_imap_directory" {}
variable "finance_app_monzo_registered_accounts_json" {}
variable "finance_app_oauth_google_client_id" {} variable "finance_app_oauth_google_client_id" {}
variable "finance_app_oauth_google_client_secret" {} variable "finance_app_oauth_google_client_secret" {}
variable "finance_app_graphql_api_secret" {}
resource "null_resource" "core_services" { resource "null_resource" "core_services" {
# List all the core modules that must be provisioned first # List all the core modules that must be provisioned first
@ -259,16 +259,16 @@ module "home_assistant" {
} }
module "finance_app" { module "finance_app" {
source = "./finance_app" source = "./finance_app"
tls_secret_name = var.tls_secret_name tls_secret_name = var.tls_secret_name
monzo_client_id = var.finance_app_monzo_client_id monzo_client_id = var.finance_app_monzo_client_id
monzo_client_secret = var.finance_app_monzo_client_secret monzo_client_secret = var.finance_app_monzo_client_secret
sqlite_db_path = var.finance_app_sqlite_db_path sqlite_db_path = var.finance_app_sqlite_db_path
imap_host = var.finance_app_imap_host imap_host = var.finance_app_imap_host
imap_user = var.finance_app_imap_user imap_user = var.finance_app_imap_user
imap_password = var.finance_app_imap_password imap_password = var.finance_app_imap_password
imap_directory = var.finance_app_imap_directory imap_directory = var.finance_app_imap_directory
monzo_registered_accounts_json = var.finance_app_monzo_registered_accounts_json oauth_google_client_id = var.finance_app_oauth_google_client_id
oauth_google_client_id = var.finance_app_oauth_google_client_id oauth_google_client_secret = var.finance_app_oauth_google_client_secret
oauth_google_client_secret = var.finance_app_oauth_google_client_secret graphql_api_secret = var.finance_app_graphql_api_secret
} }