2 commits

Author	SHA1	Message	Date
Adam Moussa	1a3c3d72a2	fix(infra): run nightly snapshots as a stack-local DLM role (PLAT-77) ... The lifecycle policy assumed a service-linked role AWS does not provide, so it stayed in ERROR and never snapshotted the data volume.	2026-10-01 13:45:29 -04:00
Adam Moussa	7c72159f31	feat(infra): add HCP Terraform for the prod file share (PLAT-77) (#56) ... * feat(infra): add HCP Terraform for the prod file share (PLAT-77) The prod host will live on a subnet in the syslog VPC. The data volume stays unmanaged and is attached only after a snapshot copy. * fix(infra): pin FileBrowser version to a release tag (PLAT-77) The version is interpolated into the boot script. Reject anything that is not a vX.Y.Z tag. * fix(infra): keep the file share off the public internet (PLAT-77) The instance has no public IP. Office routes use the syslog VPN gateway and other egress uses a NAT gateway. DLM targets the tagged data volume, and replacement detaches stop the instance first.	2026-09-29 22:32:39 +00:00