Move tfvars back to secrets

nulib · Jan 5, 2024 · 16d6083 · 16d6083
1 parent c6b4a55
commit 16d6083
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 2 deletions.
diff --git a/firewall/ip_address_sets.tf b/firewall/ip_address_sets.tf
@@ -3,7 +3,7 @@ resource "aws_wafv2_ip_set" "nul_ip_set" {
   description        = "NU Library IPv4 Addresses"
   scope              = "REGIONAL"
   ip_address_version = "IPV4"
-  addresses          = local.nul_ips
+  addresses          = var.nul_ips.v4
   tags               = local.tags
 }
 
@@ -12,7 +12,7 @@ resource "aws_wafv2_ip_set" "nul_ipv6_set" {
   description        = "NU Library IPv6 Addresses"
   scope              = "REGIONAL"
   ip_address_version = "IPV6"
-  addresses          = local.nul_ips_v6
+  addresses          = var.nul_ips.v6
   tags               = local.tags
 }
 

diff --git a/firewall/variables.tf b/firewall/variables.tf
@@ -18,6 +18,11 @@ variable "global_rate_limit" {
   default = 1000
 }
 
+variable "nul_ips" {
+  type    = map(list(string))
+  default = {v4 = [], v6 = []}
+}
+
 variable "resources" {
   type    = map
   default = {}