add zero trust postgrest worker example

[eidam]

Hey!

I wanted to write a guide to run and proxy postgres(t) with Cloudflare tunnel for a while now, then realized I can just take the already existing one written by you and just add the rest.

Resources being provisioned

• GCP instance
  • postgresql
  • postgrest
  • cloudflared
• Cloudflare tunnel
• Cloudflare Access policies, plus service token for Worker
• Cloudflare DNS records
• Cloudflare Worker that uses Access service token to fetch postgres(t) endpoint

The plan was also to use WARP to demonstrate connect to the instance's private IP directly, but it might be too much. I can perhaps prepare a different Terraform example just for that.

[eidam]

Thanks for the review! I am also adding a bonus terraform file to provision this thing on any host, namely RaspberryPi in my case, which will be ready in half an hour. 🙂

[eidam]

• just added the bonus - ability to deploy it to any ubuntu server
• raspberry pi, unfortunately, failed to run postgrest, so added a note that it's tested on amd64 archs

Tested couple of VMs and all is working great :) My current deployment example:

• https://zerotrust-worker-example.eidam.dev
• https://zerotrust-worker-example.eidam.dev?country=ireland to filter specific country
• https://zerotrust-worker-example.eidam.dev/new to generate new random DB entry

[viggy28]

I wrote something similar.

In case if it helps anyone to picture how all these work together https://viggy28.github.io/til/2021-04-18T20-44-40-accessing-postgres-from-cloudflare-workers.html