HTTPS-420 changed connection to https only

answerking/settings/base.py

@@ -145,7 +145,7 @@
 CORS_REPLACE_HTTPS_REFERER = False
 
 SECURE_PROXY_SSL_HEADER = None
-SECURE_SSL_REDIRECT = False
+SECURE_SSL_REDIRECT = True
 SESSION_COOKIE_SECURE = False
 CSRF_COOKIE_SECURE = False
 

answerking/settings/development.py

@@ -22,3 +22,4 @@
     "VERSION": "1.0.0",
     "SERVE_INCLUDE_SCHEMA": False,
 }
+SECURE_SSL_REDIRECT = False

terraform/ecs_fargate/lb.tf

@@ -42,19 +42,44 @@ resource "aws_lb_target_group" "eip_target" {
   }
 }
 
-resource "aws_lb_listener" "eip_listener" {
+
+resource "aws_acm_certificate" "cert" {
+  domain_name       = var.dns_record_name
+  validation_method = "DNS"
+
+  lifecycle {
+    create_before_destroy = true
+  }
+}
+
+resource "aws_lb_listener" "eip_listener_http_301" {
   load_balancer_arn = aws_lb.eip_lb.arn
-  port              = var.host_port
-  protocol          = var.lb_protocol
+  port              = "80"
+  protocol          = "TCP"
 
+  default_action {
+    type             = "forward"
+    target_group_arn = aws_lb_target_group.eip_target.id
+  }
+
+
+}
+
+resource "aws_lb_listener" "eip_listener" {
+  load_balancer_arn = aws_lb.eip_lb.arn
+  port              = "443"
+  protocol          = "TLS"
+  certificate_arn = aws_acm_certificate.cert.arn
 
   default_action {
     type             = "forward"
-    target_group_arn = aws_lb_target_group.eip_target.arn
+    target_group_arn = aws_lb_target_group.eip_target.id
   }
 
   tags = {
     Name  = "${var.project_name}-lb-listener"
     Owner = var.owner
   }
 }
+
+

terraform/ecs_fargate/route53.tf

@@ -1,3 +1,4 @@
+
 resource "aws_route53_record" "python" {
   zone_id = var.dns_hosted_zone_id
   name    = var.dns_record_name
@@ -10,3 +11,4 @@ resource "aws_route53_record" "python" {
     country = "GB"
   }
 }
+

terraform/ecs_fargate/sg.tf

@@ -1,20 +1,6 @@
 resource "aws_security_group" "ecs_sg" {
   vpc_id = module.vpc_subnet_setup.vpc_id
 
-  ingress {
-    from_port   = 22
-    to_port     = 22
-    protocol    = "tcp"
-    cidr_blocks = ["0.0.0.0/0"]
-  }
-
-  ingress {
-    from_port   = 443
-    to_port     = 443
-    protocol    = "tcp"
-    cidr_blocks = ["0.0.0.0/0"]
-  }
-
   ingress {
     from_port   = 8000
     to_port     = 8000
@@ -57,4 +43,4 @@ resource "aws_security_group" "rds_sg" {
     Name  = "${var.project_name}-rds-sg"
     Owner = var.owner
   }
-}
+}