From 7ea909e8543fd9d794ec8d52a4bdb719883cfed8 Mon Sep 17 00:00:00 2001
From: Evert Romero <evert.romero@computocontable.com>
Date: Thu, 16 Apr 2026 16:23:51 -0600
Subject: [PATCH] fix(terraform): permitir SSH desde internet para pipeline
 Bitbucket

---
 terraform/main.tf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/terraform/main.tf b/terraform/main.tf
index 3017782..4ba021b 100644
--- a/terraform/main.tf
+++ b/terraform/main.tf
@@ -121,7 +121,7 @@ resource "aws_security_group" "ec2_api" {
     from_port   = 22
     to_port     = 22
     protocol    = "tcp"
-    cidr_blocks = ["10.0.0.0/8"] # Ajustar a IP/VPN real del pipeline
+    cidr_blocks = ["0.0.0.0/0"] # SSH desde cualquier IP (pipeline Bitbucket + administración)
   }
 
   ingress {