Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Issue #680] Adds the CDN back #3239

Merged
merged 3 commits into from
Dec 16, 2024
Merged

[Issue #680] Adds the CDN back #3239

merged 3 commits into from
Dec 16, 2024

Conversation

coilysiren
Copy link
Collaborator

@coilysiren coilysiren commented Dec 16, 2024

Summary

Fixes #680

Time to review: 5 mins

Changes proposed

  • Uncomments the CDN
  • Adds a TLS policy
  • Fixes adding the cert to the CDN when applicable

Testing

I deployed this to both dev (without the cert) and staging (with the cert) to test

Comment on lines -12 to -16
variable "domain" {
type = string
description = "DNS domain of the website managed by HHS"
default = null
}
Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This isn't used and has never been used

Comment on lines +95 to +100
viewer_certificate {
acm_certificate_arn = var.cert_arn == null ? null : var.cert_arn
cloudfront_default_certificate = var.cert_arn == null ? true : false
minimum_protocol_version = local.minimum_protocol_version
ssl_support_method = "sni-only"
}
Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I didn't have this bit fully details before, and it broke a prod deploy

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Everything else is just uncommenting existing work

@coilysiren coilysiren changed the title Adds the CDN back [Issue #680] Adds the CDN back Dec 16, 2024
Comment on lines +5 to +6
ssl_protocols = ["TLSv1.2"]
minimum_protocol_version = "TLSv1.2_2021"
Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

These were chosen randomly on my part

@coilysiren coilysiren marked this pull request as ready for review December 16, 2024 22:17
Copy link
Collaborator

@mdragon mdragon left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚀

@coilysiren coilysiren merged commit 10ace12 into main Dec 16, 2024
6 checks passed
@coilysiren coilysiren deleted the kai/cdn-part-2 branch December 16, 2024 22:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Implement CloudFront CDN for Static Site
2 participants