-
Notifications
You must be signed in to change notification settings - Fork 1
/
builds.tf
115 lines (93 loc) · 2.5 KB
/
builds.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
locals {
builds_fqdn = "builds.${var.domain}"
builds_s3_origin_id = "S3-aeternity-node-builds"
}
resource "aws_s3_bucket" "aeternity-node-builds" {
bucket = "aeternity-node-builds"
force_destroy = false
tags = {
Name = "aeternity-node-builds"
}
}
resource "aws_s3_bucket_acl" "aeternity-node-builds" {
bucket = aws_s3_bucket.aeternity-node-builds.id
acl = "public-read"
}
resource "aws_s3_bucket_cors_configuration" "aeternity-node-builds" {
bucket = aws_s3_bucket.aeternity-node-builds.id
cors_rule {
allowed_headers = []
allowed_methods = ["GET"]
allowed_origins = ["*"]
expose_headers = []
max_age_seconds = 0
}
}
resource "aws_s3_bucket_server_side_encryption_configuration" "aeternity-node-builds" {
bucket = aws_s3_bucket.aeternity-node-builds.id
rule {
apply_server_side_encryption_by_default {
sse_algorithm = "AES256"
}
}
}
resource "aws_s3_bucket_lifecycle_configuration" "aeternity-node-builds" {
bucket = aws_s3_bucket.aeternity-node-builds.id
rule {
id = "rule-1"
status = "Enabled"
abort_incomplete_multipart_upload {
days_after_initiation = 2
}
expiration {
days = 30
}
}
}
resource "aws_cloudfront_distribution" "builds" {
enabled = true
aliases = [local.builds_fqdn]
is_ipv6_enabled = true
origin {
domain_name = aws_s3_bucket.aeternity-node-builds.bucket_domain_name
origin_id = local.builds_s3_origin_id
}
default_cache_behavior {
allowed_methods = ["GET", "HEAD"]
cached_methods = ["GET", "HEAD"]
forwarded_values {
query_string = false
headers = [
"Accept-Encoding",
"Access-Control-Request-Headers",
"Access-Control-Request-Method",
"Origin",
]
cookies {
forward = "none"
}
}
viewer_protocol_policy = "redirect-to-https"
target_origin_id = local.builds_s3_origin_id
}
restrictions {
geo_restriction {
restriction_type = "none"
}
}
viewer_certificate {
acm_certificate_arn = var.cert_arn_wildcard_services
ssl_support_method = "sni-only"
minimum_protocol_version = "TLSv1.1_2016"
}
}
resource "aws_route53_record" "builds" {
zone_id = var.zone_id
name = local.builds_fqdn
type = "A"
alias {
name = aws_cloudfront_distribution.builds.domain_name
zone_id = aws_cloudfront_distribution.builds.hosted_zone_id
evaluate_target_health = false
}
}