explicitly setting public network access to false

hashicorp · Jun 4, 2024 · 443b6f8 · 443b6f8
1 parent 19f0790
commit 443b6f8
Showing 1 changed file with 11 additions and 10 deletions.
diff --git a/modules/database/main.tf b/modules/database/main.tf
@@ -12,16 +12,17 @@ resource "azurerm_postgresql_flexible_server" "tfe" {
   name                = "${var.friendly_name_prefix}-pg"
   resource_group_name = var.resource_group_name
 
-  administrator_login    = var.database_user
-  administrator_password = random_string.tfe_pg_password.result
-  backup_retention_days  = var.database_backup_retention_days
-  delegated_subnet_id    = var.database_subnet_id
-  private_dns_zone_id    = var.database_private_dns_zone_id
-  sku_name               = var.database_machine_type
-  storage_mb             = var.database_size_mb
-  tags                   = var.tags
-  version                = var.database_version
-  zone                   = var.database_availability_zone
+  administrator_login           = var.database_user
+  administrator_password        = random_string.tfe_pg_password.result
+  public_network_access_enabled = false
+  backup_retention_days         = var.database_backup_retention_days
+  delegated_subnet_id           = var.database_subnet_id
+  private_dns_zone_id           = var.database_private_dns_zone_id
+  sku_name                      = var.database_machine_type
+  storage_mb                    = var.database_size_mb
+  tags                          = var.tags
+  version                       = var.database_version
+  zone                          = var.database_availability_zone
 }
 
 resource "azurerm_postgresql_flexible_server_configuration" "tfe" {