@@ -71,8 +71,9 @@ module "origin_cert" {
7171
7272# Postgres on EC2. Lives in the EKS VPC so pods reach it via private IP;
7373# SG-locked to traffic originating from the EKS node SG so nothing outside
74- # the cluster can connect. ARM/Graviton t4g.large (8 GiB) — bumped from
75- # t4g.medium after the OOM under NUM_WORKERS=4 ingest pressure.
74+ # the cluster can connect. Off-season — running on t4g.small to keep
75+ # cost down; bump back to t4g.large before resuming NUM_WORKERS=4 ingest
76+ # (the larger size was originally set after an OOM at that workload).
7677#
7778# Generated password is in TF state — read with:
7879# terraform output -raw postgres_password
@@ -88,7 +89,7 @@ module "postgres" {
8889 subnet_id = module. vpc . public_subnet_ids [0 ]
8990 availability_zone = " us-west-2a"
9091
91- instance_type = " t4g.large "
92+ instance_type = " t4g.small "
9293 data_volume_size_gb = 50
9394
9495 # Public IP + open to the internet on 5432. The 32-char random password
@@ -137,6 +138,10 @@ module "mqtt" {
137138 subnet_id = module. vpc . public_subnet_ids [0 ]
138139 availability_zone = " us-west-2a"
139140
141+ # Off-season override — NanoMQ runs fine on t4g.nano at idle/low publish
142+ # rates. Drop the override (module default t4g.small) before in-season.
143+ instance_type = " t4g.nano"
144+
140145 associate_public_ip = true
141146 admin_cidr_blocks = [" 0.0.0.0/0" ]
142147
0 commit comments