mirror of
https://github.com/Sea-Haven-Industries/syslog-server.git
synced 2026-09-30 03:03:14 +00:00
e17b284370
* feat(infra): migrate syslog-server to HCP Terraform Replace the mgmt CDK stack with a seahaven-prod HCP workspace so the collector is owned by Terraform before UniFi cutover. * fix(infra): keep no-logs alarm quiet until UniFi cutover The new prod unifi-syslog group is empty until devices are re-pointed, so treat_missing_data=breaching would page site-alerts on first apply. * fix(infra): allow scoped apply to modify SG rules in place Authorize/Revoke plus description updates are not enough for aws_vpc_security_group_*_rule in-place changes after the bootstrap window.
33 lines
1.1 KiB
HCL
33 lines
1.1 KiB
HCL
locals {
|
|
project = "syslog-server"
|
|
account_id = "011934824531"
|
|
environment = "prod"
|
|
|
|
hcp_project = "seahaven-prod"
|
|
hcp_workspace = "syslog-server-prod"
|
|
apply_role = "hcptf-syslog-server"
|
|
plan_role = "hcptf-syslog-server-plan"
|
|
stack_name = local.project
|
|
stack_prefix = "syslog-server-"
|
|
|
|
instance_role_name = "syslog-server-role"
|
|
instance_profile_name = "syslog-server-profile"
|
|
boundary_name = "syslog-server-instance-boundary"
|
|
log_group_name = "unifi-syslog"
|
|
site_alerts_arn = "arn:aws:sns:${var.aws_region}:${local.account_id}:site-alerts"
|
|
|
|
vpc_cidr = "10.40.0.0/16"
|
|
public_subnet_cidr = "10.40.10.0/24"
|
|
office_cidrs = ["47.21.61.4/32", "96.250.164.146/32"]
|
|
office_vpn_cidr = "10.10.0.0/16"
|
|
vpn_pool_cidr = "10.30.0.0/16"
|
|
syslog_vpc_cidr = local.vpc_cidr
|
|
syslog_ingress_cidrs = concat(
|
|
local.office_cidrs,
|
|
[local.office_vpn_cidr, local.vpn_pool_cidr, local.syslog_vpc_cidr],
|
|
)
|
|
ssh_ingress_cidrs = concat(
|
|
local.office_cidrs,
|
|
[local.office_vpn_cidr, local.syslog_vpc_cidr],
|
|
)
|
|
}
|