data "stackitprivatepreview_postgresflexalpha_flavor" "pgsql_flavor" {
  project_id    = var.project_id
  region        = "eu01"
  cpu           = 2
  ram           = 4
  node_type     = "Single"
  storage_class = "premium-perf2-stackit"
}

resource "stackitprivatepreview_postgresflexalpha_instance" "msh-alpha-sna-enc" {
  project_id      = var.project_id
  name            = "msh-alpha-sna-enc"
  backup_schedule = "0 0 * * *"
  retention_days  = 45
  flavor_id       = data.stackitprivatepreview_postgresflexalpha_flavor.pgsql_flavor.flavor_id
  replicas        = 1
  storage = {
    performance_class = "premium-perf2-stackit"
    size              = 10
  }
  encryption = {
    kek_key_id = stackit_kms_key.mshalpha-key01.key_id
    kek_key_ring_id = stackit_kms_keyring.mshalpha-keyring.keyring_id
    kek_key_version = 1
    service_account = var.sa_email
  }
  network = {
    acl          = ["0.0.0.0/0", "193.148.160.0/19", "170.85.2.177/32"]
    access_scope = "SNA"
  }
  version = 17
}

resource "stackitprivatepreview_postgresflexalpha_instance" "msh-alpha-nosna-noenc" {
  project_id      = var.project_id
  name            = "msh-alpha-nosna-enc"
  backup_schedule = "0 0 * * *"
  retention_days  = 45
  flavor_id       = data.stackitprivatepreview_postgresflexalpha_flavor.pgsql_flavor.flavor_id
  replicas        = 1
  storage = {
    performance_class = "premium-perf2-stackit"
    size              = 10
  }
  network = {
    acl          = ["0.0.0.0/0", "193.148.160.0/19", "170.85.2.177/32"]
    access_scope = "PUBLIC"
  }
  version = 16
}

resource "stackitprivatepreview_postgresflexalpha_user" "ptlsdbadminuser" {
  project_id  = var.project_id
  instance_id = stackitprivatepreview_postgresflexalpha_instance.msh-alpha-sna-enc.instance_id
  name    = var.db_admin_username
  roles       = ["createdb", "login"]
  # roles     = ["createdb", "login", "createrole"]
}

resource "stackitprivatepreview_postgresflexalpha_user" "ptlsdbuser" {
  project_id  = var.project_id
  instance_id = stackitprivatepreview_postgresflexalpha_instance.msh-alpha-sna-enc.instance_id
  name    = var.db_username
  roles       = ["login"]
  # roles     = ["createdb", "login", "createrole"]
}

resource "stackitprivatepreview_postgresflexalpha_database" "example" {
  count       = 5
  depends_on  = [stackitprivatepreview_postgresflexalpha_user.ptlsdbadminuser]
  project_id  = var.project_id
  instance_id = stackitprivatepreview_postgresflexalpha_instance.msh-alpha-sna-enc.instance_id
  name        = "${var.db_name}${count.index}"
  owner       = var.db_admin_username
}

# data "stackitprivatepreview_postgresflexalpha_instance" "datapsql" {
#   project_id = var.project_id
#   instance_id = var.instance_id
#   region = "eu01"
# }

# output "psql_instance_id" {
#   value = data.stackitprivatepreview_postgresflexalpha_instance.datapsql.instance_id
# }

output "psql_user_password" {
  value     = stackitprivatepreview_postgresflexalpha_user.ptlsdbuser.password
  sensitive = true
}

# output "psql_user_conn" {
#   value     = stackitprivatepreview_postgresflexalpha_user.ptlsdbuser.connection_string
#   sensitive = true
# }