resource "google_sql_database_instance" "pg" {
  name             = "rarelens-pg"
  database_version = "POSTGRES_16"
  region           = var.region
  deletion_protection = false

  settings {
    tier              = "db-f1-micro" # lab budget; bump for real use
    availability_type = "ZONAL"
    backup_configuration { enabled = true }
    ip_configuration {
      ipv4_enabled    = false
      private_network = google_compute_network.vpc.id
    }
  }
}

resource "google_sql_database" "rarelens" {
  name     = "rarelens"
  instance = google_sql_database_instance.pg.name
}

resource "google_sql_user" "api" {
  name     = "rarelens"
  instance = google_sql_database_instance.pg.name
  password = random_password.pg.result
}

resource "random_password" "pg" { length = 32 }