locals {
  wordpress_secrets = [
    "WORDPRESS_DB_USER",
    "WORDPRESS_DB_PASSWORD",
    "WORDPRESS_AUTH_KEY",
    "WORDPRESS_SECURE_AUTH_KEY",
    "WORDPRESS_LOGGED_IN_KEY",
    "WORDPRESS_NONCE_KEY",
    "WORDPRESS_AUTH_SALT",
    "WORDPRESS_SECURE_AUTH_SALT",
    "WORDPRESS_LOGGED_IN_SALT",
    "WORDPRESS_NONCE_SALT",
  ]

  wordpress_secrets_json = jsonencode(
    [
      for k, v in aws_secretsmanager_secret.wordpress_secret :
      {
        name      = k,
        valueFrom = "arn:aws:secretsmanager:${var.aws_region_id}:${local.account_id}:secret:${v["name"]}"
      }
    ]
  )
}

resource "aws_secretsmanager_secret" "wordpress_secret" {
  for_each = toset(local.wordpress_secrets)

  name       = "${local.secrets_name_prefix}/wordpress/${each.value}"
  kms_key_id = data.aws_kms_key.secrets_general_key.id

  tags = merge(
    local.common_tags,
    {
      project                  = "Infrastructure",
      service                  = "Secrets Manager",
      plat_env_project_service = "${local.aggregated_tag}_INFRA_SCRT"
    }
  )
}
/*
module "wordpres_website_task_def" {
  source = "../../../modules/ecs/tasks/fargate_efs"

  cpu                  = 1024
  file_system_id       = data.aws_efs_file_system.wordpress.id
  container_path       = "/var/www/html/"
  env_prefix           = local.env_prefix
  image                = "703740486246.dkr.ecr.us-east-1.amazonaws.com/prodhub/wordpress:5.4.1-apache"
  memory               = 2048
  project              = "wordpress"
  project_group        = "prodhub"
  task_exec_role_arn   = data.aws_iam_role.standard_exec.arn
  task_family          = "${local.name_prefix}-wordpress"
  task_role_arn        = data.aws_iam_role.standard_exec.arn
  volume_name          = "wordpress"
  container_port       = 80
  port_mapping_enabled = true
  secrets              = local.wordpress_secrets_json

  env_vars = [
    {
      name  = "WORDPRESS_DB_NAME",
      value = data.aws_db_instance.wordpress_db.db_name
    },
    {
      name  = "WORDPRESS_DB_HOST",
      value = data.aws_db_instance.wordpress_db.address
    }
  ]

  common_tags = merge(
    local.common_tags,
    {
      project                  = "Wordpress",
      service                  = "ECS",
      plat_env_project_service = "${local.aggregated_tag}_WP_ECS"
    }
  )
}

module "wordpres_website_service" {
  source = "../../../modules/ecs/services/webservice_taskless"

  cluster_arn             = data.aws_ecs_cluster.main.arn
  env_prefix              = local.env_prefix
  https_listener_arn      = data.aws_lb_listener.external_https_listener.arn
  project                 = "wordpress"
  project_group           = local.project_group
  security_groups         = [data.aws_security_group.ecs.id, data.aws_security_group.efs.id]
  subnets                 = data.aws_subnets.private_subnets.ids
  task_count              = 1
  task_definition_arn     = module.wordpres_website_task_def.ecs_task_definition.arn
  url                     = "wp.gdbanalytics.com"
  vpc_id                  = data.aws_vpc.main.id
  container_port          = 80
  is_public               = false
  tg_health_check_matcher = "200-499"
  tg_health_check_path    = "/"
  enable_ecs_managed_tags = true

  common_tags = merge(
    local.common_tags,
    {
      project                  = "Wordpress",
      service                  = "ECS",
      plat_env_project_service = "${local.aggregated_tag}_WP_ECS"
    }
  )
}
*/