# Mysql Database for OpenVPN
resource "random_password" "openvpn_master_password" {
  length           = 24
  special          = true
  override_special = "!#$%&*-_=+[]{}<>:?"
}

resource "aws_db_subnet_group" "private" {
  name       = "${local.name_prefix}-privatedb"
  subnet_ids = data.aws_subnets.private_db_subnets.ids
  tags = merge(
    local.common_tags,
    {
      service                  = "VPN",
      plat_env_project_service = "${local.aggregated_tag}_VPN"
    }
  )
}

/* resource "aws_db_instance" "openvpn" {
  storage_type         = "gp2"
  engine_version       = "8.0.34"
  instance_class       = "db.t3.small"
  identifier           = "${local.name_prefix}-openvpn"
  parameter_group_name = "default.mysql8.0"
  db_subnet_group_name = aws_db_subnet_group.private.id
  vpc_security_group_ids = [
    data.aws_security_group.mysql.id,
    data.aws_security_group.db_debug.id,
  ]
  copy_tags_to_snapshot   = true
  kms_key_id              = data.aws_kms_alias.default_rds.target_key_arn
  storage_encrypted       = true
  backup_retention_period = 7
  deletion_protection     = false
  skip_final_snapshot     = true
  snapshot_identifier     = "arn:aws:rds:us-east-1:483193324480:snapshot:dev-infra-openvpn-enc-final-snapshot"
  ca_cert_identifier      = "rds-ca-rsa2048-g1"

  tags = merge(
    local.common_tags,
    {
      service                  = "VPN",
      plat_env_project_service = "${local.aggregated_tag}_VPN"
    }
  )

  lifecycle {
    ignore_changes = [password, engine_version]
  }
} */