From 867405876c8aa94a3cf7e746e10193f54ef86583 Mon Sep 17 00:00:00 2001
From: decfox <mehul@openobservatory.org>
Date: Fri, 17 Jan 2025 00:52:02 +0530
Subject: [PATCH] refactor: add private subnet cidr to ckproxy

---
 tf/environments/dev/main.tf | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/tf/environments/dev/main.tf b/tf/environments/dev/main.tf
index 61bcae0..a824e58 100644
--- a/tf/environments/dev/main.tf
+++ b/tf/environments/dev/main.tf
@@ -425,17 +425,17 @@ module "ooni_clickhouse_proxy" {
     from_port = 22,
     to_port = 22,
     protocol = "tcp",
-    cidr_blocks = ["0.0.0.0/0"],
+    cidr_blocks = module.network.vpc_subnet_private[*].cidr_block,
   }, {
     from_port = 80,
     to_port = 80,
     protocol = "tcp",
-    cidr_blocks = ["0.0.0.0/0"],
+    cidr_blocks = module.network.vpc_subnet_private[*].cidr_block,
   }, {
     from_port = 9000,
     to_port = 9000,
     protocol = "tcp",
-    cidr_blocks = ["0.0.0.0/0"],
+    cidr_blocks = module.network.vpc_subnet_private[*].cidr_block,
   }]
 
   egress_rules = [{