provider "aws" {
  region = "us-east-1"
}

data "aws_vpc" "vpc" {
  filter {
    name   = "tag:Name"
    values = ["dev"]
  }
}

data "aws_subnets" "private" {
  filter {
    name   = "vpc-id"
    values = [data.aws_vpc.vpc.id]
  }

  tags = {
    tier = "private"
  }
}

module "internal_spa_environment" {
  source = "../../"
  providers = {
    aws.dns = aws
  }

  environment                   = var.environment
  service_name                  = var.service_name
  application_family            = var.application_family
  vpc_id                        = data.aws_vpc.vpc.id
  load_balancer_subnet_ids      = [for subnet in slice(data.aws_subnets.private.ids, 0, 2) : subnet]
  fully_qualified_domain_name   = "${var.service_name}.${var.domain_name}"
  certificate_domain            = "*.${var.domain_name}"
  ingress_prefix_list_names     = ["vpn-ny-users"]
}