From d02b5de48cdd3471af5ca2c48bb112c64c938dce Mon Sep 17 00:00:00 2001 From: shockrah Date: Thu, 5 Oct 2023 23:16:49 -0700 Subject: [PATCH] Splitting certs into lone files --- infra/load-balancer/cert.tf | 60 ------------------- .../load-balancer/project-athens-xyz-cert.tf | 24 ++++++++ infra/load-balancer/shockrah-xyz-cert.tf | 29 +++++++++ 3 files changed, 53 insertions(+), 60 deletions(-) delete mode 100644 infra/load-balancer/cert.tf create mode 100644 infra/load-balancer/project-athens-xyz-cert.tf create mode 100644 infra/load-balancer/shockrah-xyz-cert.tf diff --git a/infra/load-balancer/cert.tf b/infra/load-balancer/cert.tf deleted file mode 100644 index 4dbdca8..0000000 --- a/infra/load-balancer/cert.tf +++ /dev/null @@ -1,60 +0,0 @@ -# Here is the TLS cert that we create for the alpha cluster - -# NOTE: for now we're going to use .blog.shockrah.xyz -# while we test things out, once everything is up then -# we can switch the cert over to use a wildcard - -# Base cerificate for shockrah_xyz -################################## -resource "aws_acm_certificate" "shockrah_xyz" { - domain_name = "*.shockrah.xyz" - subject_alternative_names = [ "shockrah.xyz" ] - validation_method = "DNS" - - lifecycle { - create_before_destroy = true - } -} - -# Base certificate for project athens -##################################### -resource "aws_acm_certificate" "project_athens_xyz" { - domain_name = "*.project-athens.xyz" - subject_alternative_names = [ "project-athens.xyz" ] - validation_method = "DNS" - - lifecycle { - create_before_destroy = true - } -} - -# DNS RECORDS -############# -resource "aws_route53_record" "shockrah_xyz_cert" { - zone_id = var.shockrah_zone - name = tolist(aws_acm_certificate.shockrah_xyz.domain_validation_options)[0].resource_record_name - type = tolist(aws_acm_certificate.shockrah_xyz.domain_validation_options)[0].resource_record_type - records = [ tolist(aws_acm_certificate.shockrah_xyz.domain_validation_options)[0].resource_record_value ] - ttl = 300 -} - -resource "aws_route53_record" "project_athens_xyz_cert" { - zone_id = var.project_athens_zone - name = tolist(aws_acm_certificate.project_athens_xyz.domain_validation_options)[0].resource_record_name - type = tolist(aws_acm_certificate.project_athens_xyz.domain_validation_options)[0].resource_record_type - records = [ tolist(aws_acm_certificate.project_athens_xyz.domain_validation_options)[0].resource_record_value ] - ttl = 300 -} - -# Validation configuration blocks used by terraform -################################################### - -resource "aws_acm_certificate_validation" "shockrah_xyz" { - certificate_arn = aws_acm_certificate.shockrah_xyz.arn - validation_record_fqdns = [ aws_route53_record.shockrah_xyz_cert.fqdn ] -} - -resource "aws_acm_certificate_validation" "project_athens_xyz" { - certificate_arn = aws_acm_certificate.project_athens_xyz.arn - validation_record_fqdns = [ aws_route53_record.project_athens_xyz_cert.fqdn ] -} diff --git a/infra/load-balancer/project-athens-xyz-cert.tf b/infra/load-balancer/project-athens-xyz-cert.tf new file mode 100644 index 0000000..53b66bc --- /dev/null +++ b/infra/load-balancer/project-athens-xyz-cert.tf @@ -0,0 +1,24 @@ +# Base certificate for project athens +##################################### +resource "aws_acm_certificate" "project_athens_xyz" { + domain_name = "*.project-athens.xyz" + subject_alternative_names = [ "project-athens.xyz" ] + validation_method = "DNS" + + lifecycle { + create_before_destroy = true + } +} + +resource "aws_route53_record" "project_athens_xyz_cert" { + zone_id = var.project_athens_zone + name = tolist(aws_acm_certificate.project_athens_xyz.domain_validation_options)[0].resource_record_name + type = tolist(aws_acm_certificate.project_athens_xyz.domain_validation_options)[0].resource_record_type + records = [ tolist(aws_acm_certificate.project_athens_xyz.domain_validation_options)[0].resource_record_value ] + ttl = 300 +} + +resource "aws_acm_certificate_validation" "project_athens_xyz" { + certificate_arn = aws_acm_certificate.project_athens_xyz.arn + validation_record_fqdns = [ aws_route53_record.project_athens_xyz_cert.fqdn ] +} diff --git a/infra/load-balancer/shockrah-xyz-cert.tf b/infra/load-balancer/shockrah-xyz-cert.tf new file mode 100644 index 0000000..0934b52 --- /dev/null +++ b/infra/load-balancer/shockrah-xyz-cert.tf @@ -0,0 +1,29 @@ +# Base cerificate for shockrah_xyz +################################## +resource "aws_acm_certificate" "shockrah_xyz" { + domain_name = "*.shockrah.xyz" + subject_alternative_names = [ "shockrah.xyz" ] + validation_method = "DNS" + + lifecycle { + create_before_destroy = true + } +} + +# DNS RECORDS +############# +resource "aws_route53_record" "shockrah_xyz_cert" { + zone_id = var.shockrah_zone + name = tolist(aws_acm_certificate.shockrah_xyz.domain_validation_options)[0].resource_record_name + type = tolist(aws_acm_certificate.shockrah_xyz.domain_validation_options)[0].resource_record_type + records = [ tolist(aws_acm_certificate.shockrah_xyz.domain_validation_options)[0].resource_record_value ] + ttl = 300 +} + +# Validation configuration blocks used by terraform +################################################### +resource "aws_acm_certificate_validation" "shockrah_xyz" { + certificate_arn = aws_acm_certificate.shockrah_xyz.arn + validation_record_fqdns = [ aws_route53_record.shockrah_xyz_cert.fqdn ] +} +