config: use aws_ssm to store parameters

2 files changed, 36 insertions, 0 deletions

diff --git a/jinwei.me/infra/cloudflare.tf b/jinwei.me/infra/cloudflare.tf
index 6e9660e..5d81462 100644
--- a/jinwei.me/infra/cloudflare.tf
+++ b/jinwei.me/infra/cloudflare.tf
@@ -50,3 +50,9 @@ resource "cloudflare_tunnel_config" "tunnel_route" {
     }
   }
 }
+
+resource "aws_ssm_parameter" "cloudflare_tunnel_token" {
+  name  = "/${local.name}/cloudflare/tunnel_token"
+  type  = "SecureString"
+  value = cloudflare_argo_tunnel.tunnel.tunnel_token
+}
diff --git a/jinwei.me/infra/rds.tf b/jinwei.me/infra/rds.tf
index 381868e..3abac21 100644
--- a/jinwei.me/infra/rds.tf
+++ b/jinwei.me/infra/rds.tf
@@ -25,3 +25,33 @@ resource "random_password" "mysql_password" {
   length  = 16
   special = false
 }
+
+resource "aws_ssm_parameter" "wordpress_db_host" {
+  name  = "/${var.name}/mysql/host"
+  type  = "String"
+  value = aws_db_instance.jinwei-me.address
+}
+
+resource "aws_ssm_parameter" "wordpress_db_port" {
+  name  = "/${var.name}/mysql/port"
+  type  = "String"
+  value = aws_db_instance.jinwei-me.port
+}
+
+resource "aws_ssm_parameter" "wordpress_db_name" {
+  name  = "/${local.name}/mysql/name"
+  type  = "String"
+  value = aws_db_instance.jinwei-me.db_name
+}
+
+resource "aws_ssm_parameter" "wordpress_db_user" {
+  name  = "/${local.name}/mysql/username"
+  type  = "String"
+  value = aws_db_instance.jinwei-me.username
+}
+
+resource "aws_ssm_parameter" "wordpress_db_password" {
+  name  = "/${local.name}/mysql/password"
+  type  = "SecureString"
+  value = random_password.mysql_password.result
+}