feat: Made the database optional. (#8)

Author: jamesiarmes

tofu/config/development/infra/main.tf

@@ -53,6 +53,7 @@ module "app" {
   for_each = local.apps
 
   project          = each.value.name
+  project_short    = try(each.value.name_short, each.value.name)
   environment      = "development"
   program          = each.value.program
   services         = each.value.services

tofu/modules/app/database.tf

@@ -1,5 +1,6 @@
 module "database" {
   source = "../database"
+  for_each = var.database_engine != null ? toset(["this"]) : toset([])
 
   project         = var.project
   environment     = var.environment
@@ -14,11 +15,22 @@ module "database" {
 }
 
 resource "aws_vpc_security_group_ingress_rule" "database" {
-  for_each          = module.service
-  security_group_id = module.database.security_group_id
+  for_each          = length(module.database) > 0 ? module.service : {}
+  security_group_id = module.database["this"].security_group_id
 
   ip_protocol                  = "tcp"
-  from_port                    = module.database.port
-  to_port                      = module.database.port
+  from_port                    = module.database["this"].port
+  to_port                      = module.database["this"].port
   referenced_security_group_id = each.value.security_group_id
 }
+
+locals {
+  database_environment_variables = {
+    DATABASE_HOST     = try(module.database["this"].host, null)
+    DATABASE_PORT     = try(module.database["this"].port, null)
+  }
+  database_environment_secrets = {
+    DATABASE_USERNAME = length(module.database) > 0 ? "${module.database["this"].secret_arn}:username" : null
+    DATABASE_PASSWORD = length(module.database) > 0 ? "${module.database["this"].secret_arn}:password" : null
+  }
+}

tofu/modules/app/main.tf

@@ -28,15 +28,13 @@ module "service" {
   container_port           = try(each.value.expose, 3000)
   create_version_parameter = true
 
-  environment_variables = {
-    DATABASE_HOST = module.database.host
-    DATABASE_PORT = module.database.port
-  }
-
-  environment_secrets = {
-    DATABASE_USERNAME = "${module.database.secret_arn}:username"
-    DATABASE_PASSWORD = "${module.database.secret_arn}:password"
-  }
+  environment_variables = tomap({
+    for k, v in local.database_environment_variables : k => v if v != "" && v != null
+  })
+
+  environment_secrets = tomap({
+    for k, v in local.database_environment_secrets : k => v if v != "" && v != null
+  })
 
   tags = local.tags
 }