@cryptotaxi247 / infra-1 / commits / 6b5d8ab7

Add channels.nixos.org to hold the redirects to releases.nixos.org

Eelco Dolstra committed Feb 27, 2020 at 17:27 UTC 6b5d8ab74f49e9bae8f6bd581196eb08aca84a99
1 file changed +56
terraform/channels.tf new
+56
@@ -0,0 +1,56 @@
1 +resource "aws_s3_bucket" "channels" {
2 + provider = "aws.us"
3 + bucket = "nix-channels"
4 +
5 + website {
6 + index_document = "index.html"
7 + }
8 +}
9 +
10 +resource "aws_s3_bucket_policy" "channels" {
11 + provider = "aws.us"
12 + bucket = "${aws_s3_bucket.channels.id}"
13 + policy = <<EOF
14 +{
15 + "Version": "2008-10-17",
16 + "Statement": [
17 + {
18 + "Sid": "AllowPublicRead",
19 + "Effect": "Allow",
20 + "Principal": {
21 + "AWS": "*"
22 + },
23 + "Action": "s3:GetObject",
24 + "Resource": "arn:aws:s3:::nix-channels/*"
25 + },
26 + {
27 + "Sid": "AllowPublicList",
28 + "Effect": "Allow",
29 + "Principal": {
30 + "AWS": "*"
31 + },
32 + "Action": [
33 + "s3:ListBucket",
34 + "s3:GetBucketLocation"
35 + ],
36 + "Resource": "arn:aws:s3:::nix-channels"
37 + },
38 + {
39 + "Sid": "AllowUpload",
40 + "Effect": "Allow",
41 + "Principal": {
42 + "AWS": [
43 + "arn:aws:iam::080433136561:user/s3-upload-releases",
44 + "arn:aws:iam::065343343465:user/nixos-s3-upload-releases"
45 + ]
46 + },
47 + "Action": [
48 + "s3:PutObject",
49 + "s3:PutObjectAcl"
50 + ],
51 + "Resource": "arn:aws:s3:::nix-channels/*"
52 + }
53 + ]
54 +}
55 +EOF
56 +}