run router and atproto-hub in default VPC

https://cloud.google.com/appengine/docs/flexible/using-shared-vpc
https://cloud.google.com/appengine/docs/flexible/reference/app-yaml#network_settings
https://cloud.google.com/vpc/docs/serverless-vpc-access#supported_services

for #1149

app.yaml

@@ -21,7 +21,8 @@ automatic_scaling:
 inbound_services:
 - warmup
 
-# for memorystore memcache
+# Serverless VPC Access for Memorystore memcache
+# https://cloud.google.com/vpc/docs/serverless-vpc-access
 vpc_access_connector:
   name: projects/bridgy-federated/locations/us-central1/connectors/bridgy-fed
 

atproto_hub.yaml

@@ -18,9 +18,14 @@ resources:
   # https://github.com/snarfed/bridgy-fed/issues/1266#issuecomment-2321863960
   memory_gb: 6.0
 
-# can't be internal because Bluesky relay(s) need to be able to connect to us
-# over websocket for subscribeRepos
 network:
+  # run in default VPC for this project
+  # https://cloud.google.com/appengine/docs/flexible/using-shared-vpc
+  # https://cloud.google.com/appengine/docs/flexible/reference/app-yaml#network_settings
+  # https://cloud.google.com/vpc/docs/serverless-vpc-access#supported_services
+  name: projects/bridgy-federated/global/networks/default
+  # can't be internal because Bluesky relay(s) need to be able to connect to us
+  # over websocket for subscribeRepos
   instance_ip_mode: external
 
 env_variables:

router.yaml

@@ -15,6 +15,13 @@ resources:
   cpu: 1
   memory_gb: 1.6
 
+# run in default VPC for this project
+# https://cloud.google.com/appengine/docs/flexible/using-shared-vpc
+# https://cloud.google.com/appengine/docs/flexible/reference/app-yaml#network_settings
+# https://cloud.google.com/vpc/docs/serverless-vpc-access#supported_services
+network:
+  name: projects/bridgy-federated/global/networks/default
+
 env_variables:
   PDS_HOST: atproto.brid.gy
   PLC_HOST: plc.directory