From e1819f1b36a43bf9ef84f0302bf1af7d66abdc4a Mon Sep 17 00:00:00 2001
From: Ricardo Campos <ricardompcampos@gmail.com>
Date: Fri, 15 May 2026 16:56:04 +0200
Subject: [PATCH] feat: move new domain to VPS

---
 .gitignore                |  1 +
 terraform-gcp/cloudrun.tf |  6 +++---
 terraform/main.tf         | 37 ++++++++++++++++++++++++++++++++++++-
 3 files changed, 40 insertions(+), 4 deletions(-)

diff --git a/.gitignore b/.gitignore
index fe461b0..22ada5e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -42,6 +42,7 @@ schemaspy/output/
 *.tfstate
 *.tfstate.backup
 *.tfplan
+tfplan
 *.tfvars
 *.tfvars.json
 override.tf
diff --git a/terraform-gcp/cloudrun.tf b/terraform-gcp/cloudrun.tf
index 2a3ed98..3834669 100644
--- a/terraform-gcp/cloudrun.tf
+++ b/terraform-gcp/cloudrun.tf
@@ -9,7 +9,7 @@ resource "google_cloud_run_v2_service" "backend" {
     service_account = google_service_account.cloudrun_sa.email
     vpc_access {
       connector = google_vpc_access_connector.connector.id
-      egress    = "ALL_TRAFFIC"
+      egress    = "PRIVATE_RANGES_ONLY"
     }
 
     containers {
@@ -54,7 +54,7 @@ resource "google_cloud_run_v2_service" "backend" {
         value_source {
           secret_key_ref {
             secret  = google_secret_manager_secret.security_key.secret_id
-            version = "latest"
+            version = google_secret_manager_secret_version.security_key_version.version
           }
         }
       }
@@ -63,7 +63,7 @@ resource "google_cloud_run_v2_service" "backend" {
         value_source {
           secret_key_ref {
             secret  = google_secret_manager_secret.mailgun_apikey.secret_id
-            version = "latest"
+            version = google_secret_manager_secret_version.mailgun_apikey_version.version
           }
         }
       }
diff --git a/terraform/main.tf b/terraform/main.tf
index 64e7b0c..e220912 100644
--- a/terraform/main.tf
+++ b/terraform/main.tf
@@ -353,7 +353,12 @@ resource "kubernetes_ingress_v1" "tasknote_ingress" {
   }
   spec {
     tls {
-      hosts       = ["tasknote.darkroasted.vps-kinghost.net", "tasknoteapi.darkroasted.vps-kinghost.net"]
+      hosts       = [
+        "tasknote.darkroasted.vps-kinghost.net",
+        "tasknoteapi.darkroasted.vps-kinghost.net",
+        "tasknote.cc",
+        "www.tasknote.cc"
+      ]
       secret_name = "tasknote-tls-certs"
     }
     rule {
@@ -386,6 +391,36 @@ resource "kubernetes_ingress_v1" "tasknote_ingress" {
         }
       }
     }
+    rule {
+      host = "tasknote.cc"
+      http {
+        path {
+          path      = "/"
+          path_type = "Prefix"
+          backend {
+            service {
+              name = kubernetes_service_v1.tasknote_frontend_svc.metadata[0].name
+              port { number = 5000 }
+            }
+          }
+        }
+      }
+    }
+    rule {
+      host = "www.tasknote.cc"
+      http {
+        path {
+          path      = "/"
+          path_type = "Prefix"
+          backend {
+            service {
+              name = kubernetes_service_v1.tasknote_frontend_svc.metadata[0].name
+              port { number = 5000 }
+            }
+          }
+        }
+      }
+    }
   }
 }