add aws ses env vars

.github/workflows/deploy.yml

@@ -132,6 +132,10 @@ jobs:
             DB_PASSWORD=${{ secrets.DB_PASSWORD }}
             JWT_SECRET=${{ secrets.JWT_SECRET }}
             JWT_EXPIRES_IN=${{ vars.JWT_EXPIRES_IN }}
+            AWS_SES_ACCESS_KEY_ID=${{ secrets.AWS_SES_ACCESS_KEY_ID }}
+            AWS_SES_ACCESS_KEY_SECRET=${{ secrets.AWS_SES_ACCESS_KEY_SECRET }}
+            AWS_SES_DOMAIN=${{ secrets.AWS_SES_DOMAIN }}
+            AWS_SES_REGION=${{ secrets.AWS_SES_REGION }}
           context: .
           cache-from: type=gha
           cache-to: type=gha,mode=max

api/Dockerfile

@@ -7,6 +7,10 @@ ARG DB_USERNAME
 ARG DB_PASSWORD
 ARG JWT_SECRET
 ARG JWT_EXPIRES_IN
+ARG AWS_SES_ACCESS_KEY_ID
+ARG AWS_SES_ACCESS_KEY_SECRET
+ARG AWS_SES_DOMAIN
+ARG AWS_REGION
 
 ENV DB_HOST $DB_HOST
 ENV DB_PORT $DB_PORT
@@ -15,6 +19,10 @@ ENV DB_USERNAME $DB_USERNAME
 ENV DB_PASSWORD $DB_PASSWORD
 ENV JWT_SECRET $JWT_SECRET
 ENV JWT_EXPIRES_IN $JWT_EXPIRES_IN
+ENV AWS_SES_ACCESS_KEY_ID $AWS_SES_ACCESS_KEY_ID
+ENV AWS_SES_ACCESS_KEY_SECRET $AWS_SES_ACCESS_KEY_SECRET
+ENV AWS_SES_DOMAIN $AWS_SES_DOMAIN
+ENV AWS_REGION $AWS_REGION
 
 
 WORKDIR /app

infrastructure/modules/env/api_env_vars.tf

@@ -5,6 +5,9 @@ resource "random_password" "jwt_secret" {
   override_special = "!#%&*()-_=+[]{}<>:?"
 }
 
+resource "aws_iam_access_key" "email_user_access_key" {
+  user = module.email.iam_user.name
+}
 
 locals {
   api_secret_env_vars = {
@@ -14,6 +17,9 @@ locals {
     DB_USERNAME = module.postgresql.username
     DB_PORT = module.postgresql.port
     JWT_SECRET = random_password.jwt_secret.result
+    AWS_SES_ACCESS_KEY_ID = aws_iam_access_key.email_user_access_key.id
+    AWS_SES_ACCESS_KEY_SECRET = aws_iam_access_key.email_user_access_key.secret
+    AWS_SES_DOMAIN = module.email.mail_from_domain
   }
   api_env_vars = {
 

shared/config/.env.test

@@ -4,4 +4,7 @@ DB_NAME=blc
 DB_USERNAME=blue-carbon-cost
 DB_PASSWORD=blue-carbon-cost
 JWT_SECRET=mysecret
-JWT_EXPIRES_IN=1d
+JWT_EXPIRES_IN=1d
+AWS_SES_ACCESS_KEY_ID=test
+AWS_SES_ACCESS_KEY_SECRET=test
+AWS_SES_DOMAIN=test