awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-04 18:26:16 +00:00
Code Issues Packages Projects Releases Wiki Activity

improve SG ingress and egress comments

Browse Source
This commit is contained in:
x032205
2025-10-23 12:41:16 -04:00
parent 6b7819cd94
commit 795e8090c7
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/documentation/platform/gateways/relay-deployment/terraform.mdx
+4 -4
View File
@@ -41,7 +41,7 @@ resource "aws_security_group" "infisical_relay_sg" {
description = "Allows inbound traffic for Infisical Relay and SSH" description = "Allows inbound traffic for Infisical Relay and SSH"
vpc_id = "vpc-0c71f9c5709d88d18" # Change to your VPC ID vpc_id = "vpc-0c71f9c5709d88d18" # Change to your VPC ID
# Inbound: Platform-to-relay communication (TLS) # Inbound: Allows the Infisical platform to securely communicate with the Relay server.
ingress { ingress {
from_port = 8443 from_port = 8443
to_port = 8443 to_port = 8443
@@ -49,7 +49,7 @@ resource "aws_security_group" "infisical_relay_sg" {
cidr_blocks = ["0.0.0.0/0"] cidr_blocks = ["0.0.0.0/0"]
} }
# Inbound: SSH reverse tunnel from gateways # Inbound: Allows Infisical Gateway to securely communicate via the Relay.
ingress { ingress {
from_port = 2222 from_port = 2222
to_port = 2222 to_port = 2222
@@ -57,7 +57,7 @@ resource "aws_security_group" "infisical_relay_sg" {
cidr_blocks = ["0.0.0.0/0"] cidr_blocks = ["0.0.0.0/0"]
} }
# Inbound: SSH access for administration # Inbound: Allows secure shell (SSH) access for administration.
ingress { ingress {
from_port = 22 from_port = 22
to_port = 22 to_port = 22
@@ -65,7 +65,7 @@ resource "aws_security_group" "infisical_relay_sg" {
cidr_blocks = ["0.0.0.0/0"] # Restrict this to your IP in production cidr_blocks = ["0.0.0.0/0"] # Restrict this to your IP in production
} }
# Outbound: All traffic # Outbound: Allows the Relay server to make necessary outbound connections.
egress { egress {
from_port = 0 from_port = 0
to_port = 0 to_port = 0