From f8fd2a4d19f5149a71e5cef186e98ad3dd20a593 Mon Sep 17 00:00:00 2001
From: Paige Williams <pwilliams@ecotrust.org>
Date: Wed, 1 Apr 2026 14:52:12 -0700
Subject: [PATCH] add gis user password env var to infra

---
 infra/ec2.tf          | 1 +
 infra/main.tf         | 5 +++++
 infra/user_data.tftpl | 1 +
 3 files changed, 7 insertions(+)

diff --git a/infra/ec2.tf b/infra/ec2.tf
index 6fb1c5e7..2e4337db 100644
--- a/infra/ec2.tf
+++ b/infra/ec2.tf
@@ -29,6 +29,7 @@ resource "aws_instance" "itkdb" {
     sql_port             = var.sql_port
     django_allowed_hosts = var.django_allowed_hosts
     celery_broker_url    = var.celery_broker_url
+    gis_user_password    = var.gis_user_password
   })
 
   root_block_device {
diff --git a/infra/main.tf b/infra/main.tf
index 7fb7a059..01398130 100644
--- a/infra/main.tf
+++ b/infra/main.tf
@@ -96,4 +96,9 @@ variable "proxy_ecr_image_uri" {
 variable "celery_broker_url" {
   description = "Broker URL for Celery"
   type        = string
+}
+
+variable "gis_user_password" {
+  description = "Password for GIS database user"
+  type        = string
 }
\ No newline at end of file
diff --git a/infra/user_data.tftpl b/infra/user_data.tftpl
index 7220d7ac..d8908184 100644
--- a/infra/user_data.tftpl
+++ b/infra/user_data.tftpl
@@ -76,6 +76,7 @@ SQL_PORT=${sql_port}
 ITKDB_ECR_PATH=${web_ecr_image_uri}
 ITKDB_PROXY_ECR_PATH=${proxy_ecr_image_uri}
 CELERY_BROKER_URL=${celery_broker_url}
+GIS_USER_PASSWORD=${gis_user_password}
 EOF
 
 echo "Logging in to AWS ECR for web image..."