Configure Terraform for Production environment (#240)

* Add TF backend configuration for Production

* Configure TF input variables for Production

* Provide `git_repository_url` TF var in plan step

.github/workflows/terraform-plan.yml

@@ -204,6 +204,7 @@ jobs:
           TF_CLI_ARGS_plan: "-var-file=${{ inputs.tf-var-file }}"
           TF_VAR_version_identifier: ${{ inputs.ref }}
           TF_VAR_git_commit_sha: ${{ inputs.ref }}
+          TF_VAR_git_repository_url: "${{github.server_url}}/${{ github.repository }}"
           TF_VAR_datadog_api_key: ${{ secrets.datadog-api-key }}
           TF_VAR_datadog_app_key: ${{ secrets.datadog-app-key }}
           TF_VAR_console_container_image: ${{ inputs.console-image }}

terraform/production.s3.tfbackend

@@ -0,0 +1,5 @@
+region         = "us-west-2"
+bucket         = "729134339726-us-west-2-terraform"
+key            = "usdr/cpfreporter/production/us-west-2/terraform.tfstate"
+dynamodb_table = "cpfreporter-terraform-lock"
+encrypt        = true

terraform/production.tfvars

@@ -0,0 +1,47 @@
+// Common
+namespace                             = "cpfreporter"
+environment                           = "production"
+ssm_service_parameters_path_prefix    = "/cpfreporter"
+ssm_deployment_parameters_path_prefix = "/cpfreporter/deploy-config"
+log_bucket_versioning                 = true
+log_retention_in_days                 = 30
+
+// Datadog
+datadog_enabled            = true
+datadog_draft              = false
+datadog_dashboards_enabled = true
+datadog_monitors_enabled   = true
+datadog_monitor_notification_handles = [
+  "[email protected]",
+  "[email protected]",
+]
+datadog_lambda_extension_version      = "55"
+datadog_lambda_js_tracer_version      = "108"
+datadog_lambda_py_tracer_version      = "91"
+datadog_default_environment_variables = { DD_CAPTURE_LAMBDA_PAYLOAD = "true" }
+
+// RDS Postgres
+postgres_prevent_destroy           = true
+postgres_snapshot_before_destroy   = true
+postgres_apply_changes_immediately = false
+postgres_query_logging_enabled     = true
+
+// General Lambda options
+lambda_log_level  = "debug"
+lambda_js_runtime = "nodejs18.x"
+lambda_py_runtime = "python3.12"
+lambda_arch       = "x86_64"
+
+// Website
+website_domain_name   = "cpf.grants.usdigitalresponse.org"
+website_feature_flags = {}
+website_config_params = {
+  passage_app_id = "TBD"
+  auth_provider  = "passage"
+}
+
+// API Auth Provider
+auth_provider = "passage"
+
+// API
+api_domain_name = "api.cpf.grants.usdigitalresponse.org"