Expose LB timeout as a variable (#451)

Author: nb1701

cloud/aws/modules/ecs_fargate_service/main.tf

@@ -56,7 +56,7 @@ resource "aws_lb" "civiform_lb" {
   load_balancer_type               = "application"
   drop_invalid_header_fields       = false
   subnets                          = var.public_subnets
-  idle_timeout                     = 60
+  idle_timeout                     = var.lb_idle_timeout
   enable_deletion_protection       = false
   enable_cross_zone_load_balancing = false
   enable_http2                     = true

cloud/aws/modules/ecs_fargate_service/variables.tf

@@ -155,3 +155,9 @@ variable "enable_http_listener" {
   type        = bool
   default     = true
 }
+
+variable "lb_idle_timeout" {
+  description = "Time in seconds that the connection is allowed to be idle."
+  type        = number
+  default     = 120
+}

cloud/aws/templates/aws_oidc/app.tf

@@ -334,6 +334,7 @@ module "ecs_fargate_service" {
   scale_target_min_capacity = var.ecs_scale_target_min_capacity
   https_target_port         = var.port
   lb_internal               = local.enable_managed_vpc ? false : true
+  lb_idle_timeout           = var.lb_idle_timeout
   lb_logging_enabled        = var.lb_logging_enabled
   extra_inbound_rule_cidr   = var.extra_inbound_rule_cidr
   enable_http_listener      = var.enable_http_listener

cloud/aws/templates/aws_oidc/variable_definitions.json

@@ -431,6 +431,12 @@
     "tfvar": true,
     "type": "bool"
   },
+  "LB_IDLE_TIMEOUT": {
+    "required": false,
+    "secret": false,
+    "tfvar": true,
+    "type": "integer"
+  },
   "LB_LOGGING_ENABLED": {
     "required": false,
     "secret": false,

cloud/aws/templates/aws_oidc/variables.tf

@@ -544,6 +544,12 @@ variable "external_vpc_public_subnet_ids" {
   default     = []
 }
 
+variable "lb_idle_timeout" {
+  description = "Time in seconds that the connection is allowed to be idle. If the CiviForm server takes longer than this to respond (e.g. when compiling an export), the request will return a 504 Gateway error."
+  type        = number
+  default     = 120
+}
+
 variable "lb_logging_enabled" {
   type        = bool
   description = "Whether to enable LB access logging."