Merge pull request #210 from ruby-no-kai/sponsor-app-mod

ruby-no-kai/sponsor-app#99

Author: sorah

tf/sponsor-app/.mairu.json

@@ -0,0 +1,4 @@
+{
+  "server": "https://amc.rubykaigi.net/api/remote/",
+  "role": "arn:aws:iam::005216166247:role/OrgzAdmin"
+}

tf/sponsor-app/.terraform.lock.hcl

@@ -0,0 +1,5 @@
+data "aws_acm_certificate" "use1-sponsorships-rk-o" {
+  provider    = aws.use1
+  domain      = "sponsorships.rubykaigi.org"
+  most_recent = true
+}

tf/sponsor-app/acm.tf

@@ -0,0 +1,37 @@
+data "aws_caller_identity" "current" {}
+
+locals {
+  aws_account_id = "005216166247"
+}
+
+provider "aws" {
+  region              = "us-west-2"
+  allowed_account_ids = [local.aws_account_id]
+  default_tags {
+    tags = {
+      Project = "sponsor-app"
+    }
+  }
+}
+
+provider "aws" {
+  alias               = "use1"
+  region              = "us-east-1"
+  allowed_account_ids = [local.aws_account_id]
+  default_tags {
+    tags = {
+      Project = "sponsor-app"
+    }
+  }
+}
+
+provider "aws" {
+  alias               = "apne1"
+  region              = "ap-northeast-1"
+  allowed_account_ids = [local.aws_account_id]
+  default_tags {
+    tags = {
+      Project = "sponsor-app"
+    }
+  }
+}

tf/sponsor-app/aws.tf

@@ -0,0 +1,9 @@
+terraform {
+  backend "s3" {
+    bucket               = "rk-infra"
+    workspace_key_prefix = "terraform"
+    key                  = "terraform/sponsor-app.tfstate"
+    region               = "ap-northeast-1"
+    use_lockfile         = true
+  }
+}

tf/sponsor-app/backend.tf

@@ -0,0 +1,31 @@
+module "dev" {
+  source = "../../../sponsor-app/tf"
+
+  providers = {
+    aws            = aws
+    aws.cloudfront = aws.use1
+    aws.files      = aws.apne1
+  }
+
+  environment               = "dev"
+  service_name              = "sponsor-app-dev"
+  sqs_name_suffix           = "dev"
+  iam_role_prefix           = "SponsorAppDev"
+  iam_apprunner_access_name = "AppraSponsorAppDev"
+
+  s3_bucket_name = "rk-sponsorship-files-dev"
+  s3_cors_origins = [
+    "http://localhost:13000",
+    "http://localhost:13010",
+    "http://localhost:3000",
+    "https://amc.rubykaigi.net",
+  ]
+
+  enable_cloudfront       = false
+  enable_sqs              = false
+  enable_apprunner        = false
+  enable_amc_oidc         = true
+  enable_shared_resources = false
+
+  github_actions_sub = "repo:ruby-no-kai/sponsor-app:ref:refs/heads/master"
+}

tf/sponsor-app/dev.tf

@@ -0,0 +1,32 @@
+module "prd" {
+  source = "../../../sponsor-app/tf"
+
+  providers = {
+    aws            = aws
+    aws.cloudfront = aws.use1
+    aws.files      = aws.apne1
+  }
+
+  environment               = "production"
+  service_name              = "sponsor-app"
+  sqs_name_suffix           = "prd"
+  iam_role_prefix           = "SponsorApp"
+  iam_apprunner_access_name = "AppraSponsorApp"
+
+  s3_bucket_name  = "rk-sponsorship-files-prd"
+  s3_cors_origins = ["https://sponsorships.rubykaigi.org"]
+
+  enable_cloudfront       = true
+  enable_sqs              = true
+  enable_apprunner        = true
+  enable_amc_oidc         = false
+  enable_shared_resources = true
+
+  app_domain            = "sponsorships.rubykaigi.org"
+  certificate_arn       = data.aws_acm_certificate.use1-sponsorships-rk-o.arn
+  cloudfront_log_bucket = "rk-aws-logs.s3.amazonaws.com"
+  cloudfront_log_prefix = "cf/sponsorships.rubykaigi.org/"
+  cloudfront_comment    = "sponsor-app"
+
+  github_actions_sub = "repo:ruby-no-kai/sponsor-app:environment:production"
+}

tf/sponsor-app/prd.tf

@@ -0,0 +1,8 @@
+terraform {
+  required_providers {
+    aws = {
+      source = "hashicorp/aws"
+    }
+  }
+  required_version = ">= 0.13"
+}