mirror of
https://github.com/projecthorus/sondehub-infra.git
synced 2024-12-18 20:57:56 +00:00
1086 lines
29 KiB
HCL
1086 lines
29 KiB
HCL
# manages the short codes
|
|
|
|
|
|
resource "aws_lambda_function" "redirect" {
|
|
function_name = "sondehub-redirect"
|
|
handler = "redirect.handler"
|
|
s3_bucket = aws_s3_bucket_object.lambda.bucket
|
|
s3_key = aws_s3_bucket_object.lambda.key
|
|
publish = true
|
|
memory_size = 128
|
|
role = aws_iam_role.basic_lambda_role.arn
|
|
runtime = "python3.9"
|
|
timeout = 3
|
|
source_code_hash = data.archive_file.lambda.output_base64sha256
|
|
}
|
|
|
|
resource "aws_lambda_function" "ham_redirect" {
|
|
function_name = "ham-sondehub-redirect"
|
|
handler = "redirect_ham.handler"
|
|
s3_bucket = aws_s3_bucket_object.lambda.bucket
|
|
s3_key = aws_s3_bucket_object.lambda.key
|
|
publish = true
|
|
memory_size = 128
|
|
role = aws_iam_role.basic_lambda_role.arn
|
|
runtime = "python3.9"
|
|
timeout = 3
|
|
source_code_hash = data.archive_file.lambda.output_base64sha256
|
|
}
|
|
|
|
resource "aws_lambda_permission" "ham_redirect" {
|
|
action = "lambda:InvokeFunction"
|
|
function_name = aws_lambda_function.ham_redirect.arn
|
|
principal = "edgelambda.amazonaws.com"
|
|
}
|
|
|
|
|
|
|
|
resource "aws_route53_record" "testing_A" {
|
|
name = "testing"
|
|
type = "A"
|
|
alias {
|
|
name = aws_cloudfront_distribution.testing.domain_name
|
|
zone_id = aws_cloudfront_distribution.testing.hosted_zone_id
|
|
evaluate_target_health = false
|
|
}
|
|
zone_id = aws_route53_zone.Route53HostedZone.zone_id
|
|
}
|
|
|
|
resource "aws_route53_record" "testing_AAAA" {
|
|
name = "testing"
|
|
type = "AAAA"
|
|
alias {
|
|
name = aws_cloudfront_distribution.testing.domain_name
|
|
zone_id = aws_cloudfront_distribution.testing.hosted_zone_id
|
|
evaluate_target_health = false
|
|
}
|
|
zone_id = aws_route53_zone.Route53HostedZone.zone_id
|
|
}
|
|
|
|
resource "aws_route53_record" "amateur_A" {
|
|
name = "amateur"
|
|
type = "A"
|
|
alias {
|
|
name = aws_cloudfront_distribution.amateur.domain_name
|
|
zone_id = aws_cloudfront_distribution.amateur.hosted_zone_id
|
|
evaluate_target_health = false
|
|
}
|
|
zone_id = "Z0756308IVLVF48G6G1S"
|
|
}
|
|
|
|
resource "aws_route53_record" "amateur_AAAA" {
|
|
name = "amateur"
|
|
type = "AAAA"
|
|
alias {
|
|
name = aws_cloudfront_distribution.amateur.domain_name
|
|
zone_id = aws_cloudfront_distribution.amateur.hosted_zone_id
|
|
evaluate_target_health = false
|
|
}
|
|
zone_id = "Z0756308IVLVF48G6G1S"
|
|
}
|
|
|
|
resource "aws_route53_record" "amateur_testing_A" {
|
|
name = "amateur-testing"
|
|
type = "A"
|
|
alias {
|
|
name = aws_cloudfront_distribution.amateur_testing.domain_name
|
|
zone_id = aws_cloudfront_distribution.amateur_testing.hosted_zone_id
|
|
evaluate_target_health = false
|
|
}
|
|
zone_id = "Z0756308IVLVF48G6G1S"
|
|
}
|
|
|
|
resource "aws_route53_record" "amateur_testing_AAAA" {
|
|
name = "amateur-testing"
|
|
type = "AAAA"
|
|
alias {
|
|
name = aws_cloudfront_distribution.amateur_testing.domain_name
|
|
zone_id = aws_cloudfront_distribution.amateur_testing.hosted_zone_id
|
|
evaluate_target_health = false
|
|
}
|
|
zone_id = "Z0756308IVLVF48G6G1S"
|
|
}
|
|
|
|
resource "aws_route53_record" "ham_A" {
|
|
name = "ham"
|
|
type = "A"
|
|
alias {
|
|
name = aws_cloudfront_distribution.amateur.domain_name
|
|
zone_id = aws_cloudfront_distribution.amateur.hosted_zone_id
|
|
evaluate_target_health = false
|
|
}
|
|
zone_id = "Z0756308IVLVF48G6G1S"
|
|
}
|
|
|
|
resource "aws_route53_record" "ham_AAAA" {
|
|
name = "ham"
|
|
type = "AAAA"
|
|
alias {
|
|
name = aws_cloudfront_distribution.amateur.domain_name
|
|
zone_id = aws_cloudfront_distribution.amateur.hosted_zone_id
|
|
evaluate_target_health = false
|
|
}
|
|
zone_id = "Z0756308IVLVF48G6G1S"
|
|
}
|
|
|
|
|
|
resource "aws_route53_record" "root_A" {
|
|
name = ""
|
|
allow_overwrite = true
|
|
type = "A"
|
|
alias {
|
|
name = aws_cloudfront_distribution.sondehub.domain_name
|
|
zone_id = aws_cloudfront_distribution.sondehub.hosted_zone_id
|
|
evaluate_target_health = false
|
|
}
|
|
zone_id = "Z0756308IVLVF48G6G1S"
|
|
}
|
|
|
|
resource "aws_route53_record" "root_AAAA" {
|
|
name = ""
|
|
allow_overwrite = true
|
|
type = "AAAA"
|
|
alias {
|
|
name = aws_cloudfront_distribution.sondehub.domain_name
|
|
zone_id = aws_cloudfront_distribution.sondehub.hosted_zone_id
|
|
evaluate_target_health = false
|
|
}
|
|
zone_id = "Z0756308IVLVF48G6G1S"
|
|
}
|
|
|
|
resource "aws_route53_record" "predict_A" {
|
|
name = "predict"
|
|
type = "A"
|
|
alias {
|
|
name = aws_cloudfront_distribution.predict.domain_name
|
|
zone_id = aws_cloudfront_distribution.predict.hosted_zone_id
|
|
evaluate_target_health = false
|
|
}
|
|
zone_id = "Z0756308IVLVF48G6G1S"
|
|
}
|
|
|
|
resource "aws_route53_record" "predict_AAAA" {
|
|
name = "predict"
|
|
type = "AAAA"
|
|
alias {
|
|
name = aws_cloudfront_distribution.predict.domain_name
|
|
zone_id = aws_cloudfront_distribution.predict.hosted_zone_id
|
|
evaluate_target_health = false
|
|
}
|
|
zone_id = "Z0756308IVLVF48G6G1S"
|
|
}
|
|
|
|
resource "aws_route53_record" "predict_testing_A" {
|
|
name = "predict-testing"
|
|
type = "A"
|
|
alias {
|
|
name = aws_cloudfront_distribution.predict-testing.domain_name
|
|
zone_id = aws_cloudfront_distribution.predict-testing.hosted_zone_id
|
|
evaluate_target_health = false
|
|
}
|
|
zone_id = "Z0756308IVLVF48G6G1S"
|
|
}
|
|
|
|
resource "aws_route53_record" "predict_testing_AAAA" {
|
|
name = "predict-testing"
|
|
type = "AAAA"
|
|
alias {
|
|
name = aws_cloudfront_distribution.predict-testing.domain_name
|
|
zone_id = aws_cloudfront_distribution.predict-testing.hosted_zone_id
|
|
evaluate_target_health = false
|
|
}
|
|
zone_id = "Z0756308IVLVF48G6G1S"
|
|
}
|
|
|
|
|
|
resource "aws_route53_record" "tracker_A" {
|
|
name = "tracker"
|
|
type = "A"
|
|
alias {
|
|
name = aws_cloudfront_distribution.sondehub.domain_name
|
|
zone_id = aws_cloudfront_distribution.sondehub.hosted_zone_id
|
|
evaluate_target_health = false
|
|
}
|
|
zone_id = "Z0756308IVLVF48G6G1S"
|
|
}
|
|
|
|
resource "aws_route53_record" "tracker_AAAA" {
|
|
name = "tracker"
|
|
type = "AAAA"
|
|
alias {
|
|
name = aws_cloudfront_distribution.sondehub.domain_name
|
|
zone_id = aws_cloudfront_distribution.sondehub.hosted_zone_id
|
|
evaluate_target_health = false
|
|
}
|
|
zone_id = "Z0756308IVLVF48G6G1S"
|
|
}
|
|
|
|
resource "aws_route53_record" "www_A" {
|
|
name = "www"
|
|
type = "A"
|
|
alias {
|
|
name = aws_cloudfront_distribution.sondehub.domain_name
|
|
zone_id = aws_cloudfront_distribution.sondehub.hosted_zone_id
|
|
evaluate_target_health = false
|
|
}
|
|
zone_id = "Z0756308IVLVF48G6G1S"
|
|
}
|
|
|
|
resource "aws_route53_record" "www_AAAA" {
|
|
name = "www"
|
|
type = "AAAA"
|
|
alias {
|
|
name = aws_cloudfront_distribution.sondehub.domain_name
|
|
zone_id = aws_cloudfront_distribution.sondehub.hosted_zone_id
|
|
evaluate_target_health = false
|
|
}
|
|
zone_id = "Z0756308IVLVF48G6G1S"
|
|
}
|
|
|
|
resource "aws_route53_record" "v2_A" {
|
|
name = ""
|
|
allow_overwrite = true
|
|
type = "A"
|
|
alias {
|
|
name = aws_cloudfront_distribution.sondehub.domain_name
|
|
zone_id = aws_cloudfront_distribution.sondehub.hosted_zone_id
|
|
evaluate_target_health = false
|
|
}
|
|
zone_id = aws_route53_zone.Route53HostedZone.zone_id
|
|
}
|
|
|
|
resource "aws_route53_record" "v2_AAAA" {
|
|
name = ""
|
|
allow_overwrite = true
|
|
type = "AAAA"
|
|
alias {
|
|
name = aws_cloudfront_distribution.sondehub.domain_name
|
|
zone_id = aws_cloudfront_distribution.sondehub.hosted_zone_id
|
|
evaluate_target_health = false
|
|
}
|
|
zone_id = aws_route53_zone.Route53HostedZone.zone_id
|
|
}
|
|
|
|
resource "aws_route53_record" "api_raw" {
|
|
name = "api-raw"
|
|
type = "CNAME"
|
|
ttl = 300
|
|
records = [
|
|
aws_apigatewayv2_domain_name.ApiGatewayV2DomainName.domain_name_configuration[0].target_domain_name
|
|
]
|
|
zone_id = aws_route53_zone.Route53HostedZone.zone_id
|
|
}
|
|
|
|
resource "aws_route53_record" "api_A" {
|
|
name = "api"
|
|
type = "A"
|
|
alias {
|
|
name = aws_cloudfront_distribution.api.domain_name
|
|
zone_id = aws_cloudfront_distribution.api.hosted_zone_id
|
|
evaluate_target_health = false
|
|
}
|
|
zone_id = aws_route53_zone.Route53HostedZone.zone_id
|
|
}
|
|
|
|
resource "aws_route53_record" "api_AAAA" {
|
|
name = "api"
|
|
type = "AAAA"
|
|
alias {
|
|
name = aws_cloudfront_distribution.api.domain_name
|
|
zone_id = aws_cloudfront_distribution.api.hosted_zone_id
|
|
evaluate_target_health = false
|
|
}
|
|
zone_id = aws_route53_zone.Route53HostedZone.zone_id
|
|
}
|
|
|
|
|
|
resource "aws_cloudfront_distribution" "sondehub" {
|
|
aliases = [
|
|
local.domain_name,
|
|
"sondehub.org",
|
|
"tracker.sondehub.org",
|
|
"www.sondehub.org"
|
|
]
|
|
default_root_object = "index.html"
|
|
origin {
|
|
custom_origin_config {
|
|
http_port = 80
|
|
https_port = 443
|
|
origin_keepalive_timeout = 5
|
|
origin_protocol_policy = "https-only"
|
|
origin_read_timeout = 30
|
|
origin_ssl_protocols = [
|
|
"TLSv1",
|
|
"TLSv1.1",
|
|
"TLSv1.2"
|
|
]
|
|
}
|
|
domain_name = aws_cloudfront_distribution.card.domain_name
|
|
origin_id = "card"
|
|
origin_path = ""
|
|
}
|
|
origin {
|
|
domain_name = aws_s3_bucket.v2.bucket_regional_domain_name
|
|
origin_id = "S3-${local.domain_name}"
|
|
origin_path = ""
|
|
}
|
|
origin {
|
|
connection_attempts = 3
|
|
connection_timeout = 10
|
|
domain_name = "sondehub-burst-calc.s3-website-us-east-1.amazonaws.com"
|
|
origin_id = "sondehub-burst-calc.s3-website-us-east-1.amazonaws.com"
|
|
custom_origin_config {
|
|
http_port = 80
|
|
https_port = 443
|
|
origin_keepalive_timeout = 5
|
|
origin_protocol_policy = "http-only"
|
|
origin_read_timeout = 30
|
|
origin_ssl_protocols = [
|
|
"TLSv1.2",
|
|
]
|
|
}
|
|
}
|
|
default_cache_behavior {
|
|
allowed_methods = ["GET", "HEAD", "OPTIONS"]
|
|
cached_methods = [
|
|
"HEAD",
|
|
"GET"
|
|
]
|
|
compress = true
|
|
default_ttl = 120
|
|
forwarded_values {
|
|
cookies {
|
|
forward = "none"
|
|
}
|
|
query_string = false
|
|
}
|
|
lambda_function_association {
|
|
event_type = "viewer-request"
|
|
lambda_arn = aws_lambda_function.redirect.qualified_arn
|
|
}
|
|
max_ttl = 120
|
|
min_ttl = 120
|
|
smooth_streaming = false
|
|
target_origin_id = "S3-${local.domain_name}"
|
|
viewer_protocol_policy = "redirect-to-https"
|
|
}
|
|
ordered_cache_behavior {
|
|
path_pattern = "index.html"
|
|
allowed_methods = ["GET", "HEAD", "OPTIONS"]
|
|
cached_methods = [
|
|
"HEAD",
|
|
"GET"
|
|
]
|
|
response_headers_policy_id = aws_cloudfront_response_headers_policy.no_cache.id
|
|
compress = true
|
|
forwarded_values {
|
|
cookies {
|
|
forward = "none"
|
|
}
|
|
query_string = false
|
|
}
|
|
|
|
max_ttl = 0
|
|
min_ttl = 0
|
|
default_ttl = 0
|
|
smooth_streaming = false
|
|
target_origin_id = "S3-${local.domain_name}"
|
|
viewer_protocol_policy = "redirect-to-https"
|
|
}
|
|
ordered_cache_behavior {
|
|
path_pattern = "/"
|
|
allowed_methods = ["GET", "HEAD", "OPTIONS"]
|
|
cached_methods = [
|
|
"HEAD",
|
|
"GET"
|
|
]
|
|
response_headers_policy_id = aws_cloudfront_response_headers_policy.no_cache.id
|
|
compress = true
|
|
forwarded_values {
|
|
cookies {
|
|
forward = "none"
|
|
}
|
|
query_string = false
|
|
}
|
|
|
|
max_ttl = 0
|
|
min_ttl = 0
|
|
default_ttl = 0
|
|
smooth_streaming = false
|
|
target_origin_id = "S3-${local.domain_name}"
|
|
viewer_protocol_policy = "redirect-to-https"
|
|
}
|
|
|
|
ordered_cache_behavior {
|
|
|
|
allowed_methods = ["GET", "HEAD"]
|
|
cached_methods = [
|
|
"HEAD",
|
|
"GET"
|
|
]
|
|
compress = true
|
|
default_ttl = 120
|
|
forwarded_values {
|
|
cookies {
|
|
forward = "none"
|
|
}
|
|
query_string = false
|
|
}
|
|
max_ttl = 120
|
|
min_ttl = 120
|
|
path_pattern = "card/*"
|
|
smooth_streaming = false
|
|
target_origin_id = "card"
|
|
viewer_protocol_policy = "redirect-to-https"
|
|
}
|
|
ordered_cache_behavior {
|
|
allowed_methods = ["GET", "HEAD", "OPTIONS"]
|
|
cached_methods = [
|
|
"HEAD",
|
|
"GET"
|
|
]
|
|
forwarded_values {
|
|
cookies {
|
|
forward = "none"
|
|
}
|
|
query_string = false
|
|
}
|
|
compress = true
|
|
default_ttl = 0
|
|
max_ttl = 0
|
|
min_ttl = 0
|
|
path_pattern = "calc/*"
|
|
smooth_streaming = false
|
|
target_origin_id = "sondehub-burst-calc.s3-website-us-east-1.amazonaws.com"
|
|
viewer_protocol_policy = "redirect-to-https"
|
|
}
|
|
ordered_cache_behavior {
|
|
allowed_methods = ["GET", "HEAD", "OPTIONS"]
|
|
cached_methods = [
|
|
"HEAD",
|
|
"GET"
|
|
]
|
|
forwarded_values {
|
|
cookies {
|
|
forward = "none"
|
|
}
|
|
query_string = false
|
|
}
|
|
compress = true
|
|
default_ttl = 0
|
|
max_ttl = 0
|
|
min_ttl = 0
|
|
path_pattern = "calc"
|
|
smooth_streaming = false
|
|
target_origin_id = "sondehub-burst-calc.s3-website-us-east-1.amazonaws.com"
|
|
viewer_protocol_policy = "redirect-to-https"
|
|
}
|
|
ordered_cache_behavior {
|
|
allowed_methods = ["GET", "HEAD", "OPTIONS"]
|
|
cached_methods = [
|
|
"HEAD",
|
|
"GET"
|
|
]
|
|
compress = true
|
|
default_ttl = 120
|
|
forwarded_values {
|
|
cookies {
|
|
forward = "none"
|
|
}
|
|
query_string = false
|
|
}
|
|
max_ttl = 120
|
|
min_ttl = 120
|
|
path_pattern = "*.*"
|
|
smooth_streaming = false
|
|
target_origin_id = "S3-${local.domain_name}"
|
|
viewer_protocol_policy = "redirect-to-https"
|
|
}
|
|
custom_error_response {
|
|
error_caching_min_ttl = 10
|
|
error_code = 403
|
|
response_code = "200"
|
|
response_page_path = "/card/index.html"
|
|
}
|
|
custom_error_response {
|
|
error_caching_min_ttl = 10
|
|
error_code = 404
|
|
response_code = "200"
|
|
response_page_path = "/card/index.html"
|
|
}
|
|
comment = ""
|
|
price_class = "PriceClass_All"
|
|
enabled = true
|
|
viewer_certificate {
|
|
acm_certificate_arn = aws_acm_certificate.CertificateManagerCertificate_root.arn
|
|
minimum_protocol_version = "TLSv1.2_2019"
|
|
ssl_support_method = "sni-only"
|
|
}
|
|
restrictions {
|
|
geo_restriction {
|
|
restriction_type = "none"
|
|
}
|
|
}
|
|
http_version = "http2"
|
|
is_ipv6_enabled = true
|
|
}
|
|
|
|
resource "aws_cloudfront_distribution" "testing" {
|
|
aliases = [
|
|
"testing.${local.domain_name}"
|
|
]
|
|
default_root_object = "index.html"
|
|
origin {
|
|
domain_name = aws_s3_bucket.v2.bucket_regional_domain_name
|
|
origin_id = "S3-${local.domain_name}/testing"
|
|
origin_path = "/testing"
|
|
}
|
|
default_cache_behavior {
|
|
allowed_methods = ["GET", "HEAD"]
|
|
cached_methods = [
|
|
"HEAD",
|
|
"GET"
|
|
]
|
|
compress = true
|
|
default_ttl = 5
|
|
forwarded_values {
|
|
cookies {
|
|
forward = "none"
|
|
}
|
|
query_string = false
|
|
}
|
|
max_ttl = 5
|
|
min_ttl = 0
|
|
smooth_streaming = false
|
|
target_origin_id = "S3-${local.domain_name}/testing"
|
|
viewer_protocol_policy = "redirect-to-https"
|
|
}
|
|
comment = ""
|
|
price_class = "PriceClass_All"
|
|
enabled = true
|
|
viewer_certificate {
|
|
acm_certificate_arn = aws_acm_certificate_validation.CertificateManagerCertificate.certificate_arn
|
|
minimum_protocol_version = "TLSv1.2_2021"
|
|
ssl_support_method = "sni-only"
|
|
}
|
|
restrictions {
|
|
geo_restriction {
|
|
restriction_type = "none"
|
|
}
|
|
}
|
|
http_version = "http2"
|
|
is_ipv6_enabled = true
|
|
}
|
|
|
|
resource "aws_cloudfront_distribution" "amateur" {
|
|
aliases = [
|
|
"amateur.sondehub.org",
|
|
"ham.sondehub.org"
|
|
]
|
|
default_root_object = "index.html"
|
|
origin {
|
|
domain_name = aws_s3_bucket.v2.bucket_regional_domain_name
|
|
origin_id = "S3-${local.domain_name}/amateur"
|
|
origin_path = "/amateur"
|
|
}
|
|
default_cache_behavior {
|
|
allowed_methods = ["GET", "HEAD"]
|
|
cached_methods = [
|
|
"HEAD",
|
|
"GET"
|
|
]
|
|
compress = true
|
|
default_ttl = 5
|
|
forwarded_values {
|
|
cookies {
|
|
forward = "none"
|
|
}
|
|
query_string = false
|
|
}
|
|
max_ttl = 5
|
|
min_ttl = 0
|
|
smooth_streaming = false
|
|
target_origin_id = "S3-${local.domain_name}/amateur"
|
|
viewer_protocol_policy = "redirect-to-https"
|
|
lambda_function_association {
|
|
event_type = "viewer-request"
|
|
lambda_arn = aws_lambda_function.ham_redirect.qualified_arn
|
|
}
|
|
}
|
|
ordered_cache_behavior {
|
|
allowed_methods = ["GET", "HEAD", "OPTIONS"]
|
|
cached_methods = [
|
|
"HEAD",
|
|
"GET"
|
|
]
|
|
compress = true
|
|
default_ttl = 120
|
|
forwarded_values {
|
|
cookies {
|
|
forward = "none"
|
|
}
|
|
query_string = false
|
|
}
|
|
max_ttl = 120
|
|
min_ttl = 120
|
|
path_pattern = "*.*"
|
|
smooth_streaming = false
|
|
target_origin_id = "S3-${local.domain_name}/amateur"
|
|
viewer_protocol_policy = "redirect-to-https"
|
|
}
|
|
comment = ""
|
|
price_class = "PriceClass_All"
|
|
enabled = true
|
|
viewer_certificate {
|
|
acm_certificate_arn = aws_acm_certificate.CertificateManagerCertificate_root.arn
|
|
minimum_protocol_version = "TLSv1.2_2021"
|
|
ssl_support_method = "sni-only"
|
|
}
|
|
restrictions {
|
|
geo_restriction {
|
|
restriction_type = "none"
|
|
}
|
|
}
|
|
http_version = "http2"
|
|
is_ipv6_enabled = true
|
|
}
|
|
|
|
resource "aws_cloudfront_response_headers_policy" "no_cache" {
|
|
name = "nocache"
|
|
|
|
custom_headers_config {
|
|
items {
|
|
header = "cache-control"
|
|
override = true
|
|
value = "no-cache"
|
|
}
|
|
}
|
|
}
|
|
|
|
resource "aws_cloudfront_distribution" "amateur_testing" {
|
|
aliases = [
|
|
"amateur-testing.sondehub.org"
|
|
]
|
|
default_root_object = "index.html"
|
|
origin {
|
|
domain_name = aws_s3_bucket.v2.bucket_regional_domain_name
|
|
origin_id = "S3-${local.domain_name}/amateur-testing"
|
|
origin_path = "/amateur-testing"
|
|
}
|
|
default_cache_behavior {
|
|
allowed_methods = ["GET", "HEAD"]
|
|
cached_methods = [
|
|
"HEAD",
|
|
"GET"
|
|
]
|
|
compress = true
|
|
default_ttl = 5
|
|
forwarded_values {
|
|
cookies {
|
|
forward = "none"
|
|
}
|
|
query_string = false
|
|
}
|
|
max_ttl = 5
|
|
min_ttl = 0
|
|
smooth_streaming = false
|
|
target_origin_id = "S3-${local.domain_name}/amateur-testing"
|
|
viewer_protocol_policy = "redirect-to-https"
|
|
# lambda_function_association {
|
|
# event_type = "viewer-request"
|
|
# lambda_arn = aws_lambda_function.ham_redirect.qualified_arn
|
|
# }
|
|
}
|
|
ordered_cache_behavior {
|
|
allowed_methods = ["GET", "HEAD", "OPTIONS"]
|
|
cached_methods = [
|
|
"HEAD",
|
|
"GET"
|
|
]
|
|
compress = true
|
|
default_ttl = 120
|
|
forwarded_values {
|
|
cookies {
|
|
forward = "none"
|
|
}
|
|
query_string = false
|
|
}
|
|
max_ttl = 120
|
|
min_ttl = 120
|
|
path_pattern = "*.*"
|
|
smooth_streaming = false
|
|
target_origin_id = "S3-${local.domain_name}/amateur-testing"
|
|
viewer_protocol_policy = "redirect-to-https"
|
|
}
|
|
comment = ""
|
|
price_class = "PriceClass_All"
|
|
enabled = true
|
|
viewer_certificate {
|
|
acm_certificate_arn = aws_acm_certificate.CertificateManagerCertificate_root.arn
|
|
minimum_protocol_version = "TLSv1.2_2021"
|
|
ssl_support_method = "sni-only"
|
|
}
|
|
restrictions {
|
|
geo_restriction {
|
|
restriction_type = "none"
|
|
}
|
|
}
|
|
http_version = "http2"
|
|
is_ipv6_enabled = true
|
|
}
|
|
|
|
resource "aws_cloudfront_distribution" "card" {
|
|
origin {
|
|
domain_name = aws_s3_bucket.card.bucket_regional_domain_name
|
|
origin_id = aws_s3_bucket.card.bucket_regional_domain_name
|
|
origin_path = ""
|
|
}
|
|
default_cache_behavior {
|
|
allowed_methods = ["GET", "HEAD"]
|
|
cached_methods = [
|
|
"HEAD",
|
|
"GET"
|
|
]
|
|
compress = false
|
|
default_ttl = 120
|
|
forwarded_values {
|
|
cookies {
|
|
forward = "none"
|
|
}
|
|
query_string = false
|
|
}
|
|
max_ttl = 120
|
|
min_ttl = 120
|
|
smooth_streaming = false
|
|
target_origin_id = aws_s3_bucket.card.bucket_regional_domain_name
|
|
viewer_protocol_policy = "redirect-to-https"
|
|
}
|
|
comment = ""
|
|
default_root_object = "index.html"
|
|
price_class = "PriceClass_100"
|
|
enabled = true
|
|
viewer_certificate {
|
|
cloudfront_default_certificate = true
|
|
minimum_protocol_version = "TLSv1"
|
|
}
|
|
restrictions {
|
|
geo_restriction {
|
|
restriction_type = "none"
|
|
}
|
|
}
|
|
http_version = "http2"
|
|
is_ipv6_enabled = true
|
|
}
|
|
|
|
resource "aws_cloudfront_distribution" "predict" {
|
|
aliases = [
|
|
"predict.sondehub.org"
|
|
]
|
|
origin {
|
|
domain_name = aws_s3_bucket.predict.bucket_regional_domain_name
|
|
origin_id = aws_s3_bucket.predict.bucket_regional_domain_name
|
|
origin_path = ""
|
|
}
|
|
default_root_object = "index.html"
|
|
default_cache_behavior {
|
|
allowed_methods = ["GET", "HEAD", "OPTIONS"]
|
|
cached_methods = [
|
|
"HEAD",
|
|
"GET"
|
|
]
|
|
compress = true
|
|
default_ttl = 120
|
|
forwarded_values {
|
|
cookies {
|
|
forward = "none"
|
|
}
|
|
query_string = false
|
|
}
|
|
max_ttl = 120
|
|
min_ttl = 120
|
|
smooth_streaming = false
|
|
target_origin_id = aws_s3_bucket.predict.bucket_regional_domain_name
|
|
viewer_protocol_policy = "redirect-to-https"
|
|
}
|
|
comment = ""
|
|
price_class = "PriceClass_100"
|
|
enabled = true
|
|
viewer_certificate {
|
|
acm_certificate_arn = aws_acm_certificate.CertificateManagerCertificate_root.arn
|
|
minimum_protocol_version = "TLSv1.2_2021"
|
|
ssl_support_method = "sni-only"
|
|
}
|
|
restrictions {
|
|
geo_restriction {
|
|
restriction_type = "none"
|
|
}
|
|
}
|
|
http_version = "http2"
|
|
is_ipv6_enabled = true
|
|
}
|
|
|
|
resource "aws_cloudfront_distribution" "predict-testing" {
|
|
aliases = [
|
|
"predict-testing.sondehub.org"
|
|
]
|
|
origin {
|
|
domain_name = aws_s3_bucket.predict-testing.bucket_regional_domain_name
|
|
origin_id = aws_s3_bucket.predict-testing.bucket_regional_domain_name
|
|
origin_path = ""
|
|
}
|
|
default_root_object = "index.html"
|
|
default_cache_behavior {
|
|
allowed_methods = ["GET", "HEAD", "OPTIONS"]
|
|
cached_methods = [
|
|
"HEAD",
|
|
"GET"
|
|
]
|
|
compress = true
|
|
default_ttl = 120
|
|
forwarded_values {
|
|
cookies {
|
|
forward = "none"
|
|
}
|
|
query_string = false
|
|
}
|
|
max_ttl = 120
|
|
min_ttl = 120
|
|
smooth_streaming = false
|
|
target_origin_id = aws_s3_bucket.predict-testing.bucket_regional_domain_name
|
|
viewer_protocol_policy = "redirect-to-https"
|
|
}
|
|
comment = ""
|
|
price_class = "PriceClass_100"
|
|
enabled = true
|
|
viewer_certificate {
|
|
acm_certificate_arn = aws_acm_certificate.CertificateManagerCertificate_root.arn
|
|
minimum_protocol_version = "TLSv1.2_2021"
|
|
ssl_support_method = "sni-only"
|
|
}
|
|
restrictions {
|
|
geo_restriction {
|
|
restriction_type = "none"
|
|
}
|
|
}
|
|
http_version = "http2"
|
|
is_ipv6_enabled = true
|
|
}
|
|
|
|
resource "aws_cloudfront_distribution" "api" {
|
|
aliases = [
|
|
"api.${local.domain_name}"
|
|
]
|
|
origin {
|
|
custom_origin_config {
|
|
http_port = 80
|
|
https_port = 443
|
|
origin_keepalive_timeout = 5
|
|
origin_protocol_policy = "https-only"
|
|
origin_read_timeout = 60
|
|
origin_ssl_protocols = [
|
|
"TLSv1.2"
|
|
]
|
|
}
|
|
domain_name = aws_apigatewayv2_domain_name.ApiGatewayV2DomainName.domain_name
|
|
origin_id = "Custom-api.${local.domain_name}"
|
|
origin_path = ""
|
|
}
|
|
default_cache_behavior {
|
|
allowed_methods = ["DELETE", "GET", "HEAD", "OPTIONS", "PATCH", "POST", "PUT"]
|
|
cached_methods = [
|
|
"HEAD",
|
|
"GET"
|
|
]
|
|
compress = true
|
|
default_ttl = 60
|
|
forwarded_values {
|
|
cookies {
|
|
forward = "none"
|
|
}
|
|
headers = [
|
|
"Origin",
|
|
"Access-Control-Request-Method",
|
|
"Access-Control-Request-Headers"
|
|
]
|
|
query_string = true
|
|
}
|
|
max_ttl = 120
|
|
min_ttl = 60
|
|
smooth_streaming = false
|
|
target_origin_id = "Custom-api.${local.domain_name}"
|
|
viewer_protocol_policy = "allow-all"
|
|
}
|
|
ordered_cache_behavior {
|
|
allowed_methods = ["GET", "HEAD"]
|
|
cached_methods = [
|
|
"HEAD",
|
|
"GET"
|
|
]
|
|
compress = true
|
|
default_ttl = 30
|
|
forwarded_values {
|
|
cookies {
|
|
forward = "none"
|
|
}
|
|
headers = [
|
|
"Origin",
|
|
"Access-Control-Request-Method",
|
|
"Access-Control-Request-Headers"
|
|
]
|
|
query_string = true
|
|
}
|
|
max_ttl = 30
|
|
min_ttl = 30
|
|
path_pattern = "predictions"
|
|
smooth_streaming = false
|
|
target_origin_id = "Custom-api.${local.domain_name}"
|
|
viewer_protocol_policy = "redirect-to-https"
|
|
}
|
|
ordered_cache_behavior {
|
|
allowed_methods = ["GET", "HEAD"]
|
|
cached_methods = [
|
|
"HEAD",
|
|
"GET"
|
|
]
|
|
compress = true
|
|
default_ttl = 300
|
|
forwarded_values {
|
|
cookies {
|
|
forward = "none"
|
|
}
|
|
headers = [
|
|
"Origin",
|
|
"Access-Control-Request-Method",
|
|
"Access-Control-Request-Headers"
|
|
]
|
|
query_string = false
|
|
}
|
|
max_ttl = 300
|
|
min_ttl = 300
|
|
path_pattern = "pledges"
|
|
smooth_streaming = false
|
|
target_origin_id = "Custom-api.${local.domain_name}"
|
|
viewer_protocol_policy = "redirect-to-https"
|
|
}
|
|
ordered_cache_behavior {
|
|
allowed_methods = ["GET", "HEAD", "OPTIONS"]
|
|
cached_methods = [
|
|
"HEAD",
|
|
"GET"
|
|
]
|
|
compress = true
|
|
default_ttl = 300
|
|
forwarded_values {
|
|
cookies {
|
|
forward = "none"
|
|
}
|
|
headers = [
|
|
"Origin",
|
|
"Access-Control-Request-Method",
|
|
"Access-Control-Request-Headers"
|
|
]
|
|
query_string = false
|
|
}
|
|
max_ttl = 300
|
|
min_ttl = 300
|
|
path_pattern = "listener/stats"
|
|
smooth_streaming = false
|
|
target_origin_id = "Custom-api.${local.domain_name}"
|
|
viewer_protocol_policy = "redirect-to-https"
|
|
}
|
|
ordered_cache_behavior {
|
|
allowed_methods = ["GET", "HEAD", "OPTIONS"]
|
|
cached_methods = [
|
|
"HEAD",
|
|
"GET"
|
|
]
|
|
compress = true
|
|
default_ttl = 300
|
|
forwarded_values {
|
|
cookies {
|
|
forward = "none"
|
|
}
|
|
headers = [
|
|
"Origin",
|
|
"Access-Control-Request-Method",
|
|
"Access-Control-Request-Headers"
|
|
]
|
|
query_string = false
|
|
}
|
|
max_ttl = 300
|
|
min_ttl = 300
|
|
path_pattern = "listeners/stats"
|
|
smooth_streaming = false
|
|
target_origin_id = "Custom-api.${local.domain_name}"
|
|
viewer_protocol_policy = "redirect-to-https"
|
|
}
|
|
comment = ""
|
|
price_class = "PriceClass_100"
|
|
enabled = true
|
|
viewer_certificate {
|
|
acm_certificate_arn = aws_acm_certificate_validation.CertificateManagerCertificate.certificate_arn
|
|
minimum_protocol_version = "TLSv1.2_2019"
|
|
ssl_support_method = "sni-only"
|
|
}
|
|
restrictions {
|
|
geo_restriction {
|
|
restriction_type = "none"
|
|
}
|
|
}
|
|
http_version = "http2"
|
|
is_ipv6_enabled = true
|
|
}
|
|
|
|
|
|
|
|
resource "aws_s3_bucket" "v2" {
|
|
bucket = local.domain_name
|
|
}
|
|
|
|
resource "aws_s3_bucket" "cf_logs" {
|
|
bucket = "sondehub-cloudfront-logs"
|
|
}
|
|
|
|
resource "aws_s3_bucket" "history" {
|
|
bucket = "sondehub-history"
|
|
cors_rule {
|
|
allowed_headers = [
|
|
"*",
|
|
]
|
|
allowed_methods = [
|
|
"GET",
|
|
]
|
|
allowed_origins = [
|
|
"*",
|
|
]
|
|
expose_headers = []
|
|
max_age_seconds = 0
|
|
}
|
|
website {
|
|
index_document = "index.html"
|
|
}
|
|
}
|
|
|
|
resource "aws_s3_bucket" "predict" {
|
|
bucket = "sondehub-predict"
|
|
}
|
|
|
|
resource "aws_s3_bucket" "predict-testing" {
|
|
bucket = "sondehub-predict-testing"
|
|
}
|
|
|
|
|
|
resource "aws_s3_bucket" "card" {
|
|
bucket = "sondehub-v2-card"
|
|
}
|
|
|
|
|
|
resource "aws_s3_bucket_policy" "S3BucketPolicy" {
|
|
bucket = aws_s3_bucket.v2.bucket
|
|
policy = "{\"Version\":\"2012-10-17\",\"Id\":\"Policy1615627853229\",\"Statement\":[{\"Sid\":\"Stmt1615627852247\",\"Effect\":\"Allow\",\"Principal\":\"*\",\"Action\":\"s3:GetObject\",\"Resource\":\"arn:aws:s3:::${local.domain_name}/*\"}]}"
|
|
}
|
|
|
|
resource "aws_s3_bucket_policy" "S3BucketPolicy2" {
|
|
bucket = aws_s3_bucket.history.bucket
|
|
policy = "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Sid\":\"PublicRead\",\"Effect\":\"Allow\",\"Principal\":\"*\",\"Action\":[\"s3:GetObject\",\"s3:GetObjectVersion\",\"s3:ListBucket\",\"s3:GetObjectTorrent\"],\"Resource\":[\"arn:aws:s3:::sondehub-history/*\",\"arn:aws:s3:::sondehub-history\"]}]}"
|
|
} |