fix: force pulbic network access to false

Author: jbarascut

main.tf

@@ -2,18 +2,19 @@
 ##########
 ## Core
 resource "azurerm_postgresql_flexible_server" "this" {
-  name                         = var.name
-  resource_group_name          = var.resource_group_name
-  location                     = var.location
-  version                      = var.pg_version
-  delegated_subnet_id          = var.create_subnet ? azurerm_subnet.this[0].id : var.delegated_subnet_id
-  private_dns_zone_id          = azurerm_private_dns_zone.this.id
-  administrator_login          = var.administrator_login
-  administrator_password       = random_password.this.result
-  sku_name                     = var.sku_name
-  storage_mb                   = var.storage_mb
-  backup_retention_days        = var.backup_retention_days
-  geo_redundant_backup_enabled = var.geo_redundant_backup_enabled
+  name                          = var.name
+  resource_group_name           = var.resource_group_name
+  location                      = var.location
+  version                       = var.pg_version
+  delegated_subnet_id           = var.create_subnet ? azurerm_subnet.this[0].id : var.delegated_subnet_id
+  private_dns_zone_id           = azurerm_private_dns_zone.this.id
+  public_network_access_enabled = var.public_network_access_enabled
+  administrator_login           = var.administrator_login
+  administrator_password        = random_password.this.result
+  sku_name                      = var.sku_name
+  storage_mb                    = var.storage_mb
+  backup_retention_days         = var.backup_retention_days
+  geo_redundant_backup_enabled  = var.geo_redundant_backup_enabled
   maintenance_window {
     day_of_week  = var.maintenance_window.day_of_week
     start_hour   = var.maintenance_window.start_hour

variables.tf

@@ -100,6 +100,12 @@ variable "private_dns_zone_name_prefix" {
   default     = null
 }
 
+variable "public_network_access_enabled" {
+  description = "Is public network access enabled on the PostgreSQL Flexible Server."
+  type        = bool
+  default     = false
+}
+
 variable "subnet_name_prefix" {
   description = "Subnet name prefix, if undefined  then `name` is used"
   type        = string