cbazzaandClaude Opus 4.5
fddc78618e
Build and Deploy to Synology NAS / test (push) Failing after 15m0s
Build and Deploy to Synology NAS / build (push) Has been cancelled
Build and Deploy to Synology NAS / deploy (push) Has been cancelled
Build and Deploy to Synology NAS / notify (push) Has been cancelled
- Add Terraform configuration for AKS cluster deployment - Add Kubernetes manifests for Laravel app (deployment, services, secrets) - Add PostgreSQL on Kubernetes with multi-schema support - Add Nginx Ingress Controller configuration - Add GitHub Actions workflow for Azure deployment - Add HTTP Basic Authentication for production - Add database restore functionality via Kubernetes jobs - Update Dockerfile and nginx config for production - Update database.php for multi-schema connections - Add deployment documentation and quickstart guides Deployed version: 1.0.7 at http://72.144.113.194/ Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
71 lines
2.3 KiB
Plaintext
71 lines
2.3 KiB
Plaintext
# Azure Database for PostgreSQL Flexible Server
|
|
resource "azurerm_postgresql_flexible_server" "main" {
|
|
name = local.postgresql_server_name
|
|
resource_group_name = data.azurerm_resource_group.main.name
|
|
location = var.location
|
|
|
|
administrator_login = var.postgresql_admin_username
|
|
administrator_password = local.postgresql_admin_pass
|
|
|
|
sku_name = var.postgresql_sku_name
|
|
version = var.postgresql_version
|
|
storage_mb = var.postgresql_storage_mb
|
|
|
|
backup_retention_days = var.postgresql_backup_retention_days
|
|
geo_redundant_backup_enabled = false
|
|
|
|
# Public access for initial setup (can be restricted later)
|
|
# For production, consider using private endpoints or VNet integration
|
|
public_network_access_enabled = true
|
|
|
|
zone = "1"
|
|
|
|
tags = merge(
|
|
local.common_labels,
|
|
{
|
|
purpose = "database"
|
|
}
|
|
)
|
|
}
|
|
|
|
# PostgreSQL Firewall Rule - Allow Azure Services
|
|
resource "azurerm_postgresql_flexible_server_firewall_rule" "allow_azure_services" {
|
|
name = "AllowAzureServices"
|
|
server_id = azurerm_postgresql_flexible_server.main.id
|
|
start_ip_address = "0.0.0.0"
|
|
end_ip_address = "0.0.0.0"
|
|
}
|
|
|
|
# PostgreSQL Firewall Rule - Allow AKS Outbound IPs
|
|
# Note: In production, consider using VNet integration or private endpoints
|
|
resource "azurerm_postgresql_flexible_server_firewall_rule" "allow_all_temporary" {
|
|
name = "AllowAllTemporary"
|
|
server_id = azurerm_postgresql_flexible_server.main.id
|
|
start_ip_address = "0.0.0.0"
|
|
end_ip_address = "255.255.255.255"
|
|
|
|
# This is a temporary rule for initial setup
|
|
# Replace with specific IP ranges or VNet integration in production
|
|
}
|
|
|
|
# PostgreSQL Database
|
|
resource "azurerm_postgresql_flexible_server_database" "main" {
|
|
name = local.postgresql_db_name
|
|
server_id = azurerm_postgresql_flexible_server.main.id
|
|
collation = "en_US.utf8"
|
|
charset = "utf8"
|
|
}
|
|
|
|
# PostgreSQL Configuration - Optimize for Laravel
|
|
resource "azurerm_postgresql_flexible_server_configuration" "max_connections" {
|
|
name = "max_connections"
|
|
server_id = azurerm_postgresql_flexible_server.main.id
|
|
value = "200"
|
|
}
|
|
|
|
resource "azurerm_postgresql_flexible_server_configuration" "timezone" {
|
|
name = "timezone"
|
|
server_id = azurerm_postgresql_flexible_server.main.id
|
|
value = "UTC"
|
|
}
|