terraform: point to the new Faslty shield
This syncs the config with the changes that Fastly introduced themselves. They created a new version of all our config with the following comment attached to it: !!! DO NOT REVERT - Auto configuration updates for https://status.fastly.com/incidents/ysgcxswp5h8l Contact Fastly support for more details !!! Please do not revert these changes, and only clone from this version going forward.
zimbatm committed
Jan 31, 2022 at 15:33 UTC
411d8a585e1b90f1427720cf3f114de1a418a1d7
5 files changed
+6
-4
terraform/cache.tf
+1
-1
@@ -116,7 +116,7 @@ resource "fastly_service_v1" "cache" {
116
name = "s3.amazonaws.com"
117
override_host = aws_s3_bucket.cache.bucket_domain_name
118
port = 443
119
- shield = "bwi-va-us"
119
+ shield = local.fastly_shield
120
ssl_cert_hostname = "s3.amazonaws.com"
121
ssl_check_cert = true
122
use_ssl = true
terraform/channels.tf
+1
-1
@@ -104,7 +104,7 @@ resource "fastly_service_v1" "channels" {
104
name = local.channels_backend
105
override_host = local.channels_backend
106
port = 80
107
- shield = "bwi-va-us"
107
+ shield = local.fastly_shield
108
use_ssl = false
109
weight = 100
110
}
terraform/locals.tf
+2
@@ -1,4 +1,6 @@
1
locals {
2
# TLS v1.2, protocols HTTP/1.1 and HTTP/2
3
fastly_tls12_sni_configuration_id = "5PXBTa6c01Xoh54ylNwmVA"
4
+
5
+ fastly_shield = "iad-va-us"
6
}
terraform/nixpkgs-tarballs.tf
+1
-1
@@ -164,7 +164,7 @@ resource "fastly_service_v1" "nixpkgs-tarballs" {
164
name = local.tarballs_backend
165
override_host = local.tarballs_backend
166
port = 80
167
- shield = "bwi-va-us"
167
+ shield = local.fastly_shield
168
use_ssl = false
169
weight = 100
170
}
terraform/releases.tf
+1
-1
@@ -93,7 +93,7 @@ resource "fastly_service_v1" "releases" {
93
name = local.releases_backend
94
override_host = local.releases_backend
95
port = 443
96
- shield = "bwi-va-us"
96
+ shield = local.fastly_shield
97
ssl_cert_hostname = local.releases_backend
98
ssl_check_cert = true
99
use_ssl = true