terraform: only manage cloudfront for now
zimbatm committed
Jul 11, 2018 at 17:03 UTC
28b2b9f9a3c8ed977fa805c7126b693b3f96b7d7
1 file changed
+15
-9
terraform/nixpkgs-tarballs.tf
+15
-9
@@ -1,3 +1,4 @@
1
+/*
2
resource "aws_s3_bucket" "nixpkgs-tarballs" {
3
bucket = "nixpkgs-tarballs"
4
region = "eu-west-1"
@@ -7,27 +8,33 @@ resource "aws_s3_bucket" "nixpkgs-tarballs" {
8
index_document = "index.html"
9
}
10
}
11
+*/
12
+
13
+locals {
14
+ nixpkgs-tarballs_website_domain = "nixpkgs-tarballs.s3-website-eu-west-1.amazonaws.com" # "${aws_s3_bucket.nixpkgs-tarballs.website_domain}"
15
+ nixpkgs-tarballs_name = "nixpkgs-tarballs" # "#{aws_s3_bucket.nixpkgs-tarballs.name}"
16
+}
17
18
resource "aws_cloudfront_distribution" "nixpkgs-tarballs" {
19
enabled = true
20
is_ipv6_enabled = true
21
default_root_object = "index.html"
15
- price_class = "PriceClass_All"
16
- aliases = ["tarballs.nixos.org"]
22
+ price_class = "PriceClass_All"
23
+ aliases = ["tarballs.nixos.org"]
24
25
origin {
19
- domain_name = "${aws_s3_bucket.nixpkgs-tarballs.website_domain}"
20
- origin_id = "${aws_s3_bucket.nixpkgs-tarballs.name}"
26
+ domain_name = "${local.nixpkgs-tarballs_website_domain}"
27
+ origin_id = "${local.nixpkgs-tarballs_name}"
28
}
29
30
default_cache_behavior {
24
- allowed_methods = ["HEAD", "GET"]
25
- cached_methods = ["HEAD", "GET"]
26
- target_origin_id = "${aws_s3_bucket.nixpkgs-tarballs.name}"
31
+ allowed_methods = ["HEAD", "GET"]
32
+ cached_methods = ["HEAD", "GET"]
33
+ target_origin_id = "${local.nixpkgs-tarballs_name}"
34
viewer_protocol_policy = "allow-all"
35
min_ttl = 0
36
default_ttl = 86400
30
- max_ttl = 31536000
37
+ max_ttl = 31536000
38
39
forwarded_values {
40
query_string = false
@@ -36,7 +43,6 @@ resource "aws_cloudfront_distribution" "nixpkgs-tarballs" {
43
forward = "none"
44
}
45
}
39
-
46
}
47
48
viewer_certificate {