feat: move new domain to VPS

.gitignore

@@ -42,6 +42,7 @@ schemaspy/output/
 *.tfstate
 *.tfstate.backup
 *.tfplan
+tfplan
 *.tfvars
 *.tfvars.json
 override.tf

terraform-gcp/cloudrun.tf

@@ -9,7 +9,7 @@ resource "google_cloud_run_v2_service" "backend" {
     service_account = google_service_account.cloudrun_sa.email
     vpc_access {
       connector = google_vpc_access_connector.connector.id
-      egress    = "ALL_TRAFFIC"
+      egress    = "PRIVATE_RANGES_ONLY"
     }
 
     containers {
@@ -54,7 +54,7 @@ resource "google_cloud_run_v2_service" "backend" {
         value_source {
           secret_key_ref {
             secret  = google_secret_manager_secret.security_key.secret_id
-            version = "latest"
+            version = google_secret_manager_secret_version.security_key_version.version
           }
         }
       }
@@ -63,7 +63,7 @@ resource "google_cloud_run_v2_service" "backend" {
         value_source {
           secret_key_ref {
             secret  = google_secret_manager_secret.mailgun_apikey.secret_id
-            version = "latest"
+            version = google_secret_manager_secret_version.mailgun_apikey_version.version
           }
         }
       }

terraform/main.tf

@@ -353,7 +353,12 @@ resource "kubernetes_ingress_v1" "tasknote_ingress" {
   }
   spec {
     tls {
-      hosts       = ["tasknote.darkroasted.vps-kinghost.net", "tasknoteapi.darkroasted.vps-kinghost.net"]
+      hosts       = [
+        "tasknote.darkroasted.vps-kinghost.net",
+        "tasknoteapi.darkroasted.vps-kinghost.net",
+        "tasknote.cc",
+        "www.tasknote.cc"
+      ]
       secret_name = "tasknote-tls-certs"
     }
     rule {
@@ -386,6 +391,36 @@ resource "kubernetes_ingress_v1" "tasknote_ingress" {
         }
       }
     }
+    rule {
+      host = "tasknote.cc"
+      http {
+        path {
+          path      = "/"
+          path_type = "Prefix"
+          backend {
+            service {
+              name = kubernetes_service_v1.tasknote_frontend_svc.metadata[0].name
+              port { number = 5000 }
+            }
+          }
+        }
+      }
+    }
+    rule {
+      host = "www.tasknote.cc"
+      http {
+        path {
+          path      = "/"
+          path_type = "Prefix"
+          backend {
+            service {
+              name = kubernetes_service_v1.tasknote_frontend_svc.metadata[0].name
+              port { number = 5000 }
+            }
+          }
+        }
+      }
+    }
   }
 }