module "efs_volume" {
  source = "git@github.com:theorchard/terraform-efs.git//?ref=4.0.1"

  providers = {
    aws.dns = aws
  }

  environment              = var.environment
  service_name             = var.service_name
  application_family       = var.application_family
  vpc_id                   = module.vpc_info.vpc_id
  subnet_ids               = module.vpc_info.default_private_subnet_ids
  owner_gid                = "1010"
  owner_uid                = "1010"
  access_point_permissions = "755"

  # Allow CIDR block access to EFS.
  efs_ingress_additional_cidr_blocks = [
    "192.168.32.0/24",
  ]
}

resource "aws_security_group_rule" "allow_fargate_to_efs" {
  from_port                = 2049
  to_port                  = 2049
  protocol                 = "tcp"
  security_group_id        = module.efs_volume.efs_security_group_id_output
  source_security_group_id = module.web_service_fargate_environment.fargate_security_group_id
  type                     = "ingress"
}