-
Notifications
You must be signed in to change notification settings - Fork 16
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[Issue #680] Adds the CDN back #3239
Conversation
variable "domain" { | ||
type = string | ||
description = "DNS domain of the website managed by HHS" | ||
default = null | ||
} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This isn't used and has never been used
viewer_certificate { | ||
acm_certificate_arn = var.cert_arn == null ? null : var.cert_arn | ||
cloudfront_default_certificate = var.cert_arn == null ? true : false | ||
minimum_protocol_version = local.minimum_protocol_version | ||
ssl_support_method = "sni-only" | ||
} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I didn't have this bit fully details before, and it broke a prod deploy
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Everything else is just uncommenting existing work
ssl_protocols = ["TLSv1.2"] | ||
minimum_protocol_version = "TLSv1.2_2021" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
These were chosen randomly on my part
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🚀
Summary
Fixes #680
Time to review: 5 mins
Changes proposed
Testing
I deployed this to both dev (without the cert) and staging (with the cert) to test