fix: Update container images to use GitHub Container Registry and enhance ALB listener rules

Author: iammukeshm

terraform/envs/dev/us-east-1/dev.us-east-1.tfvars

@@ -31,13 +31,13 @@ db_name     = "fshdb"
 db_username = "fshadmin"
 db_password = "password123!" # Note: In production, use a more secure method for managing secrets.
 
-api_container_image = "821175633958.dkr.ecr.us-east-1.amazonaws.com/fsh-playground-api"
+api_container_image = "ghcr.io/fullstackhero/fsh-playground-api:1e15726a02d9d12cd95679e5aa3fd7fda1f0620f"
 api_container_port  = 8080
 api_cpu             = "256"
 api_memory          = "512"
 api_desired_count   = 1
 
-blazor_container_image = "821175633958.dkr.ecr.us-east-1.amazonaws.com/fsh-playground-blazor"
+blazor_container_image = "ghcr.io/fullstackhero/fsh-playground-blazor:1e15726a02d9d12cd95679e5aa3fd7fda1f0620f"
 blazor_container_port  = 8080
 blazor_cpu             = "256"
 blazor_memory          = "512"

terraform/modules/app_stack/main.tf

@@ -14,6 +14,7 @@ locals {
     Environment = var.environment
     Project     = "dotnet-starter-kit"
   }
+  aspnetcore_environment = var.environment == "dev" ? "Development" : "Production"
 }
 
 module "network" {
@@ -122,15 +123,16 @@ module "api_service" {
   subnet_ids      = module.network.private_subnet_ids
   assign_public_ip = false
 
-  listener_arn  = module.alb.listener_arn
-  path_patterns = ["/api/*"]
+  listener_arn           = module.alb.listener_arn
+  listener_rule_priority = 10
+  path_patterns          = ["/api/*", "/scalar*", "/health*", "/swagger*", "/openapi*"]
 
-  health_check_path = "/api/health"
+  health_check_path = "/health/live"
 
   environment_variables = {
-    ASPNETCORE_ENVIRONMENT      = var.environment
+    ASPNETCORE_ENVIRONMENT            = local.aspnetcore_environment
     DatabaseOptions__ConnectionString = local.db_connection_string
-    CachingOptions__Redis = module.redis.primary_endpoint_address
+    CachingOptions__Redis             = "${module.redis.primary_endpoint_address}:6379,ssl=True,abortConnect=False"
   }
 
   tags = local.common_tags
@@ -153,14 +155,15 @@ module "blazor_service" {
   subnet_ids      = module.network.private_subnet_ids
   assign_public_ip = false
 
-  listener_arn  = module.alb.listener_arn
-  path_patterns = ["/*"]
+  listener_arn           = module.alb.listener_arn
+  listener_rule_priority = 20
+  path_patterns          = ["/*"]
 
-  health_check_path = "/"
+  health_check_path = "/health/live"
 
   environment_variables = {
-    ASPNETCORE_ENVIRONMENT      = var.environment
-    Api__BaseUrl                = "http://${module.alb.dns_name}/api"
+    ASPNETCORE_ENVIRONMENT = local.aspnetcore_environment
+    Api__BaseUrl           = "http://${module.alb.dns_name}"
   }
 
   tags = local.common_tags

terraform/modules/ecs_service/main.tf

@@ -58,6 +58,7 @@ resource "aws_lb_target_group" "this" {
 
 resource "aws_lb_listener_rule" "this" {
   listener_arn = var.listener_arn
+  priority     = var.listener_rule_priority
 
   action {
     type             = "forward"

terraform/modules/ecs_service/variables.tf

@@ -65,6 +65,11 @@ variable "listener_arn" {
   description = "ALB listener ARN."
 }
 
+variable "listener_rule_priority" {
+  type        = number
+  description = "Priority for the ALB listener rule."
+}
+
 variable "path_patterns" {
   type        = list(string)
   description = "Path patterns for ALB listener rule."
@@ -94,4 +99,3 @@ variable "tags" {
   description = "Tags to apply to resources."
   default     = {}
 }
-

terraform/modules/elasticache_redis/main.tf

@@ -44,7 +44,6 @@ resource "aws_elasticache_replication_group" "this" {
   engine                        = "redis"
   engine_version                = var.engine_version
   node_type                     = var.node_type
-  num_cache_clusters            = var.number_cache_clusters
   automatic_failover_enabled    = var.automatic_failover_enabled
   multi_az_enabled              = var.multi_az_enabled
   port                          = 6379