This repository has been archived by the owner on Feb 1, 2024. It is now read-only.
/
cdn.tf
85 lines (70 loc) · 2.01 KB
/
cdn.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
resource "aws_cloudfront_distribution" "cdn" {
origin {
domain_name = "origin.${var.r53_public_hosted_zone}"
origin_id = "originAlb"
custom_origin_config {
http_port = 80
https_port = 443
origin_protocol_policy = "https-only"
origin_ssl_protocols = ["TLSv1", "TLSv1.1", "TLSv1.2"]
}
}
enabled = true
is_ipv6_enabled = true
http_version = "http2"
comment = "${var.project} (${var.environment})"
price_class = "${var.cloudfront_price_class}"
aliases = ["${var.r53_public_hosted_zone}"]
default_cache_behavior {
allowed_methods = ["DELETE", "GET", "HEAD", "OPTIONS", "PATCH", "POST", "PUT"]
cached_methods = ["GET", "HEAD", "OPTIONS"]
target_origin_id = "originAlb"
forwarded_values {
query_string = true
headers = ["*"]
cookies {
forward = "all"
}
}
compress = false
viewer_protocol_policy = "redirect-to-https"
min_ttl = 0
default_ttl = 0
max_ttl = 300
}
ordered_cache_behavior {
path_pattern = "static/*"
allowed_methods = ["GET", "HEAD", "OPTIONS"]
cached_methods = ["GET", "HEAD", "OPTIONS"]
target_origin_id = "originAlb"
forwarded_values {
query_string = false
cookies {
forward = "none"
}
}
compress = true
viewer_protocol_policy = "redirect-to-https"
min_ttl = 0
default_ttl = 300
max_ttl = 300
}
logging_config {
include_cookies = false
bucket = "${aws_s3_bucket.logs.id}.s3.amazonaws.com"
}
restrictions {
geo_restriction {
restriction_type = "none"
}
}
viewer_certificate {
acm_certificate_arn = "${module.cert_cdn.arn}"
minimum_protocol_version = "TLSv1.2_2018"
ssl_support_method = "sni-only"
}
tags {
Project = "${var.project}"
Environment = "${var.environment}"
}
}