grey/Opinionated.tf
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions1

Make sure debug files are 0600

Browse source
This commit is contained in:
Greyscale 2024-12-06 18:33:54 +01:00
parent 79931a1203
commit baf7470cb0
Signed by: grey
GPG key ID: DDB392AE64B32D89
6 changed files with 28 additions and 20 deletions
docker/config
debug.tf
products
docker_registry
registry.tf
nginx
default_page.tf
site-available
basic-auth.tfcert.tfconfig.tf

7
docker/config/debug.tf
View file

@ -1,5 +1,6 @@
resource "local_file" "config" { resource "local_file" "config" {
count = var.debug ? 1 : 0 count = var.debug ? 1 : 0
content = var.value content = var.value
filename = "${path.root}/.debug/docker/${var.stack_name}/configs/${local.file_name}" filename = "${path.root}/.debug/docker/${var.stack_name}/configs/${local.file_name}"
file_permission = "0600"
} }

5
products/docker_registry/registry.tf
View file

@ -58,8 +58,9 @@ module "docker_registry_config" {
value = yamlencode(local.registry_config_yaml) value = yamlencode(local.registry_config_yaml)
} }
resource "local_file" "docker_registry_config_yml" { resource "local_file" "docker_registry_config_yml" {
content = yamlencode(local.registry_config_yaml) content = yamlencode(local.registry_config_yaml)
filename = "${path.root}/.debug/docker-registry/config.yml" filename = "${path.root}/.debug/docker-registry/config.yml"
file_permission = "0600"
} }
# Registry Service # Registry Service

10
products/nginx/default_page.tf
View file

@ -6,14 +6,16 @@ resource "docker_config" "default_page" {
data = base64encode(local.default_page) data = base64encode(local.default_page)
} }
resource "local_file" "default_page" { resource "local_file" "default_page" {
content = base64decode(docker_config.default_page.data) content = base64decode(docker_config.default_page.data)
filename = "${path.root}/.debug/nginx/index.html" filename = "${path.root}/.debug/nginx/index.html"
file_permission = "0600"
} }
resource "docker_config" "default_conf" { resource "docker_config" "default_conf" {
name = "${var.service_name}.default.conf-${substr(sha1(file("${path.module}/default.conf")), 0, 4)}" name = "${var.service_name}.default.conf-${substr(sha1(file("${path.module}/default.conf")), 0, 4)}"
data = base64encode(file("${path.module}/default.conf")) data = base64encode(file("${path.module}/default.conf"))
} }
resource "local_file" "default_conf" { resource "local_file" "default_conf" {
content = base64decode(docker_config.default_conf.data) content = base64decode(docker_config.default_conf.data)
filename = "${path.root}/.debug/nginx/default.conf" filename = "${path.root}/.debug/nginx/default.conf"
file_permission = "0600"
} }

7
products/nginx/site-available/basic-auth.tf
View file

@ -16,7 +16,8 @@ resource "docker_config" "auth" {
data = base64encode(local.auth) data = base64encode(local.auth)
} }
resource "local_file" "auth" { resource "local_file" "auth" {
count = var.basic_auth != null ? 1 : 0 count = var.basic_auth != null ? 1 : 0
content = local.auth content = local.auth
filename = "${path.root}/.debug/nginx/${local.filenames.auth}" filename = "${path.root}/.debug/nginx/${local.filenames.auth}"
file_permission = "0600"
} }

14
products/nginx/site-available/cert.tf
View file

@ -7,9 +7,10 @@ resource "docker_config" "certificate" {
} }
} }
resource "local_file" "certificate" { resource "local_file" "certificate" {
count = var.certificate != null ? 1 : 0 count = var.certificate != null ? 1 : 0
content = local.cert_public content = local.cert_public
filename = "${path.root}/.debug/nginx/${local.filenames.certificate}" filename = "${path.root}/.debug/nginx/${local.filenames.certificate}"
file_permission = "0600"
} }
resource "docker_config" "certificate_key" { resource "docker_config" "certificate_key" {
count = var.certificate != null ? 1 : 0 count = var.certificate != null ? 1 : 0
@ -20,7 +21,8 @@ resource "docker_config" "certificate_key" {
} }
} }
resource "local_file" "certificate_key" { resource "local_file" "certificate_key" {
count = var.certificate != null ? 1 : 0 count = var.certificate != null ? 1 : 0
content = var.certificate.private_key_pem content = var.certificate.private_key_pem
filename = "${path.root}/.debug/nginx/${local.filenames.certificate_key}" filename = "${path.root}/.debug/nginx/${local.filenames.certificate_key}"
file_permission = "0600"
} }

5
products/nginx/site-available/config.tf
View file

@ -72,6 +72,7 @@ resource "docker_config" "nginx_site_available" {
# Debug copy of the configuration file # Debug copy of the configuration file
resource "local_file" "nginx_site_available" { resource "local_file" "nginx_site_available" {
filename = "${path.root}/.debug/nginx/${local.filenames.nginx}" filename = "${path.root}/.debug/nginx/${local.filenames.nginx}"
content = local.config content = local.config
file_permission = "0600"
} }