security groups for LB (#41)

sygmaprotocol · Jul 31, 2024 · f5509b8 · f5509b8
1 parent 4f3efbf
commit f5509b8
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 8 deletions.
diff --git a/relayers/nlb.tf b/relayers/nlb.tf
@@ -4,6 +4,7 @@ resource "aws_lb" "main" {
   internal                         = var.is_lb_internal
   load_balancer_type               = "network"
   subnets                          = data.aws_subnets.ec2_public_subnets.ids
+  security_groups                  = [aws_security_group.lb.id]
   enable_cross_zone_load_balancing = true
   enable_deletion_protection       = var.lb_delete_protection
 }

diff --git a/relayers/security_groups.tf b/relayers/security_groups.tf
@@ -3,14 +3,6 @@ resource "aws_security_group" "lb" {
   name   = "${var.project_name}-sg-alb-${var.app_tag}"
   vpc_id = data.aws_vpc.vpc.id
 
-  ingress {
-    protocol         = "tcp"
-    from_port        = 80
-    to_port          = 80
-    cidr_blocks      = ["0.0.0.0/0"]
-    ipv6_cidr_blocks = ["::/0"]
-  }
-
   ingress {
     protocol         = "tcp"
     from_port        = 443