Make WAF passive in DC and CO (#109)

spokenbird · web-flow · commit 5aebaa3961e5 · 2026-03-26T15:51:53.000-07:00
diff --git a/tofu/config/dev-co/main.tf b/tofu/config/dev-co/main.tf
@@ -96,6 +96,7 @@ module "app" {
   state                      = var.state
   vpc_id                     = module.vpc.vpc_id
   waf_log_group              = module.logging.log_groups["waf"]
+  passive_waf                = true
 
   api_image_url      = data.aws_ecr_repository.api.repository_url
   api_repository_arn = data.aws_ecr_repository.api.arn
diff --git a/tofu/config/dev-dc/main.tf b/tofu/config/dev-dc/main.tf
@@ -75,6 +75,7 @@ module "app" {
   state                      = var.state
   vpc_id                     = module.vpc.vpc_id
   waf_log_group              = module.logging.log_groups["waf"]
+  passive_waf                = true
 
   api_image_url      = data.aws_ecr_repository.api.repository_url
   api_repository_arn = data.aws_ecr_repository.api.arn
