terraform: sync fastly config with nixpkgs-tarballs
Copy most config from the cache
zimbatm committed
Aug 28, 2021 at 21:20 UTC
cd42a9ae2c43275a5fad554b51af4468043c19c8
2 files changed
+31
-46
terraform/nixpkgs-tarballs-fastly.tf
deleted
-46
@@ -1,46 +0,0 @@
1
-locals {
2
- # The aws_s3_bucket resource returns an unknown domain
3
- #tarballs_backend = "${lower(aws_s3_bucket.nixpkgs-tarballs.website_endpoint)}"
4
- tarballs_backend = "nixpkgs-tarballs.s3-website-eu-west-1.amazonaws.com"
5
-
6
- tarballs_domain = "tarballs.nixos.org"
7
-}
8
-
9
-resource "fastly_service_v1" "nixpkgs-tarballs" {
10
- name = "nixpkgs-tarballs"
11
- force_destroy = true
12
- default_host = local.tarballs_backend
13
-
14
- domain {
15
- name = local.tarballs_domain
16
- }
17
-
18
- backend {
19
- address = local.tarballs_backend
20
- name = "AWS S3 website"
21
-
22
- # S3 websites don't binds on port 443
23
- port = 80
24
- }
25
-
26
- # Clean headers for caching
27
-
28
- header {
29
- destination = "http.x-amz-request-id"
30
- type = "cache"
31
- action = "delete"
32
- name = "remove x-amz-request-id"
33
- }
34
- header {
35
- destination = "http.x-amz-version-id"
36
- type = "cache"
37
- action = "delete"
38
- name = "remove x-amz-version-id"
39
- }
40
- header {
41
- destination = "http.x-amz-id-2"
42
- type = "cache"
43
- action = "delete"
44
- name = "remove x-amz-id-2"
45
- }
46
-}
terraform/nixpkgs-tarballs.tf
+31
@@ -218,3 +218,34 @@ resource "aws_cloudfront_origin_access_identity" "nixpkgs-tarballs" {
218
comment = "Cloudfront identity for nixpkgs-tarballs"
219
}
220
*/
221
+
222
+locals {
223
+ tarballs_domain = "tarballs.nixos.org"
224
+}
225
+
226
+resource "fastly_service_v1" "nixpkgs-tarballs" {
227
+ name = local.tarballs_domain
228
+ default_ttl = 86400
229
+
230
+ backend {
231
+ address = "s3.amazonaws.com"
232
+ auto_loadbalance = false
233
+ between_bytes_timeout = 10000
234
+ connect_timeout = 5000
235
+ error_threshold = 0
236
+ first_byte_timeout = 15000
237
+ max_conn = 200
238
+ name = "s3.amazonaws.com"
239
+ override_host = aws_s3_bucket.nixpkgs-tarballs.bucket_domain_name
240
+ port = 443
241
+ shield = "bwi-va-us"
242
+ ssl_cert_hostname = "s3.amazonaws.com"
243
+ ssl_check_cert = true
244
+ use_ssl = true
245
+ weight = 100
246
+ }
247
+
248
+ domain {
249
+ name = local.tarballs_domain
250
+ }
251
+}