partinfra-terraform-cloudfrontssl

Introduction

A Terraform module to easily create an SSL-enabled CloudFront distribution for a custom domain.

Get Involved

• Community Ops Wiki Page
• Communication:
  • IRC: #communityit on irc.mozilla.org
  • Discourse: https://discourse.mozilla-community.org/c/community-ops

Examples

An example which specifies only the required variables:

module "example" {
  source              = "git://github.com/mozilla/partinfra-terraform-cloudfrontssl.git"

  origin_domain_name  = "discourse.mozilla-community.org"
  origin_id           = "discoursecdn"
  alias               = "cdn.discourse.mozilla-community.org"
  acm_certificate_arn = "arn:aws:acm:us-east-1:123456789012:certificate/00e371ce-a96e-435b-9e76-687ad6sa8231"
}

Reference

Variable	Description	Required	Default
origin_domain_name	The domain name CloudFront should pull from.	yes
alias	The alternate domain name for the distribution.	yes
origin_id	A unique identifier for the origin.	yes
acm_certificate_arn	The ARN for the ACM cert to use in this distribution.	yes
origin_path	The folder on the origin to request content from. Must begin with / with no tailing /.	no
origin_http_port	The port on the origin host CloudFront will make HTTP requests to.	no	80
origin_https_port	The port on the origin host CloudFront will make HTTPS requests to.	no	443
distribution_enabled	Whether the CloudFront Distribution is enabled.	no	true
comment	A comment to add to the distribution.	no
default_root_object	The object to return when a user requests the root URL.	no	index.html
compression	Enable CloudFront to compress some files with gzip (and forward the Accept-Encoding header to the origin)	no	false

Issues

For issue tracking we use bugzilla.mozilla.org. Create a bug on bugzilla.mozilla.org under Participation Infrastructure > Community Ops component.