refactor: add private subnet cidr to ckproxy

ooni · Jan 16, 2025 · 8674058 · 8674058
1 parent e790e66
commit 8674058
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/tf/environments/dev/main.tf b/tf/environments/dev/main.tf
@@ -425,17 +425,17 @@ module "ooni_clickhouse_proxy" {
     from_port = 22,
     to_port = 22,
     protocol = "tcp",
-    cidr_blocks = ["0.0.0.0/0"],
+    cidr_blocks = module.network.vpc_subnet_private[*].cidr_block,
   }, {
     from_port = 80,
     to_port = 80,
     protocol = "tcp",
-    cidr_blocks = ["0.0.0.0/0"],
+    cidr_blocks = module.network.vpc_subnet_private[*].cidr_block,
   }, {
     from_port = 9000,
     to_port = 9000,
     protocol = "tcp",
-    cidr_blocks = ["0.0.0.0/0"],
+    cidr_blocks = module.network.vpc_subnet_private[*].cidr_block,
   }]
 
   egress_rules = [{