4d74fdf593
Add complete ECS Fargate infrastructure for Clawdbot Discord bot deployment on AWS. ## Infrastructure (Terraform) - **VPC**: 100.64.0.0/16 with DNS support - **Public Subnets**: 2 subnets in different AZs - **ECR Repository**: clawdbot/bot with lifecycle policy - **IAM Roles**: Task Role (DynamoDB+S3) + Execution Role - **ECS Resources**: Fargate (256 CPU, 2048 MB memory) - **Security Group**: Outbound only - **CloudWatch**: Log group with 7-day retention ## Security Improvements - Discord Bot Token → AWS Secrets Manager - IAM policy with least privilege principle - No plaintext secrets in code ## Code Quality - Fix all 22 lint errors - Add *.d.ts to oxlint ignore patterns - Fix Dockerfile .buildstamp for Linux compatibility Closes #2049 Co-Authored-By: Claude <noreply@anthropic.com>
80 lines
1.9 KiB
HCL
80 lines
1.9 KiB
HCL
variable "aws_region" {
|
|
description = "AWS region for resources"
|
|
type = string
|
|
default = "ap-northeast-1"
|
|
}
|
|
|
|
variable "aws_account_id" {
|
|
description = "AWS account ID (for Secrets Manager ARN)"
|
|
type = string
|
|
}
|
|
|
|
variable "environment" {
|
|
description = "Environment name (e.g., production, staging)"
|
|
type = string
|
|
default = "production"
|
|
}
|
|
|
|
variable "project_name" {
|
|
description = "Project name used for resource naming"
|
|
type = string
|
|
default = "clawdbot"
|
|
}
|
|
|
|
variable "sessions_table_name" {
|
|
description = "DynamoDB table name for session storage"
|
|
type = string
|
|
default = "clawdbot-sessions"
|
|
}
|
|
|
|
variable "artifacts_table_name" {
|
|
description = "DynamoDB table name for artifacts metadata"
|
|
type = string
|
|
default = "clawdbot-artifacts"
|
|
}
|
|
|
|
variable "artifacts_bucket_name" {
|
|
description = "S3 bucket name for artifact storage"
|
|
type = string
|
|
default = "clawdbot-artifacts"
|
|
}
|
|
|
|
variable "artifacts_bucket_ttl_days" {
|
|
description = "S3 bucket lifecycle TTL in days"
|
|
type = number
|
|
default = 7
|
|
}
|
|
|
|
# ECS Fargate Configuration
|
|
variable "ecs_task_cpu" {
|
|
description = "ECS task CPU units (256 = 0.25 vCPU)"
|
|
type = number
|
|
default = 256
|
|
}
|
|
|
|
variable "ecs_task_memory" {
|
|
description = "ECS task memory in MB"
|
|
type = number
|
|
default = 2048
|
|
}
|
|
|
|
variable "ecs_service_desired_count" {
|
|
description = "Desired number of ECS tasks"
|
|
type = number
|
|
default = 1
|
|
}
|
|
|
|
variable "discord_token_secret_name" {
|
|
description = "AWS Secrets Manager secret name for Discord bot token"
|
|
type = string
|
|
default = "clawdbot/discord-token"
|
|
}
|
|
|
|
# DEPRECATED: Use discord_token_secret_name with AWS Secrets Manager instead
|
|
variable "discord_token" {
|
|
description = "DEPRECATED: Discord bot token (use Secrets Manager instead)"
|
|
type = string
|
|
sensitive = true
|
|
default = null
|
|
}
|