loadBalancer:
  type: alb
  tls:
    - hosts:
      - livekit.redmatter-dev02.pub

// the node security group is created by eks. Use tags to find it
// and add our rules to it so that clients can make webrtc connections

data "aws_security_group" "livekit-node-sg" {
  tags = {
    "<http://kubernetes.io/cluster/livekit|kubernetes.io/cluster/livekit>" = "owned"
    "aws:eks:cluster-name"          = "livekit"
  }
}

resource "aws_security_group_rule" "livekit-node-sg-media" {
  for_each = {
    "ICE/TCP" : { from_port : 7781, to_port : 7881, protocol : "tcp", cidr_blocks : ["0.0.0.0/0"] }
    "ICE/UDP Mux" : { from_port : 7782, to_port : 7882, protocol : "udp", cidr_blocks : ["0.0.0.0/0"] }
    "UDP Media" : { from_port : 50000, to_port : 60000, protocol : "udp", cidr_blocks : ["0.0.0.0/0"] }
  }
  security_group_id = data.aws_security_group.livekit-node-sg.id
  type              = "ingress"
  description       = each.key
  from_port         = each.value.from_port
  to_port           = each.value.to_port
  protocol          = each.value.protocol
  cidr_blocks       = each.value.cidr_blocks
}