infra: add ssm secrets and placeholders

2026-08-11 21:34:13 +07:00
parent 02056b2d76
commit 32d93e2a0c
1 changed files with 79 additions and 0 deletions
@@ -0,0 +1,79 @@
+resource "random_password" "db_password" {
+  length  = 32
+  special = false
+}
+
+resource "random_password" "jwt_access" {
+  length  = 64
+  special = false
+}
+
+resource "random_password" "jwt_refresh" {
+  length  = 64
+  special = false
+}
+
+resource "random_password" "entitlement_signing" {
+  length  = 64
+  special = false
+}
+
+resource "aws_ssm_parameter" "db_password" {
+  name  = "/cibello/prod/db-password"
+  type  = "SecureString"
+  value = random_password.db_password.result
+}
+
+resource "aws_ssm_parameter" "jwt_access" {
+  name  = "/cibello/prod/jwt-access"
+  type  = "SecureString"
+  value = random_password.jwt_access.result
+}
+
+resource "aws_ssm_parameter" "jwt_refresh" {
+  name  = "/cibello/prod/jwt-refresh"
+  type  = "SecureString"
+  value = random_password.jwt_refresh.result
+}
+
+resource "aws_ssm_parameter" "entitlement_signing" {
+  name  = "/cibello/prod/entitlement-signing"
+  type  = "SecureString"
+  value = random_password.entitlement_signing.result
+}
+
+resource "aws_ssm_parameter" "gemini_api_key" {
+  name  = "/cibello/prod/gemini-api-key"
+  type  = "SecureString"
+  value = ""
+}
+
+resource "aws_ssm_parameter" "aamos_api_key" {
+  name  = "/cibello/prod/aamos-api-key"
+  type  = "SecureString"
+  value = ""
+}
+
+resource "aws_ssm_parameter" "apple_private_key" {
+  name  = "/cibello/prod/apple-private-key"
+  type  = "SecureString"
+  value = ""
+}
+
+resource "aws_ssm_parameter" "google_service_account_json" {
+  name  = "/cibello/prod/google-service-account-json"
+  type  = "SecureString"
+  value = ""
+}
+
+resource "aws_ssm_parameter" "smtp_pass" {
+  name  = "/cibello/prod/smtp-pass"
+  type  = "SecureString"
+  value = ""
+}
+
+resource "aws_ssm_parameter" "eoc_push_token" {
+  name  = "/cibello/prod/eoc-push-token"
+  type  = "SecureString"
+  value = ""
+}