EHD-1518: Switch over Live service: Terraform: Create Prod environmen…

…t (except for the CloudFront and DNS record for the main app)
cabinetoffice · Feb 14, 2025 · 7c4faa0 · 7c4faa0
1 parent 2a3a420
commit 7c4faa0
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 6 deletions.
diff --git a/terraform/cloudfront.tf b/terraform/cloudfront.tf
@@ -58,13 +58,14 @@ resource "aws_cloudfront_distribution" "distribution" {
 
   price_class = "PriceClass_100"
 
-  aliases = ["${var.dns_record_subdomain_including_dot}${data.aws_route53_zone.route_53_zone_for_our_domain.name}"]
-
+  # aliases = ["${var.dns_record_subdomain_including_dot}${data.aws_route53_zone.route_53_zone_for_our_domain.name}"]
+  
   viewer_certificate {
-    acm_certificate_arn = aws_acm_certificate_validation.certificate_validation_waiter.certificate_arn
-    cloudfront_default_certificate = false
-    minimum_protocol_version = "TLSv1"
-    ssl_support_method = "sni-only"
+    # acm_certificate_arn = aws_acm_certificate_validation.certificate_validation_waiter.certificate_arn
+    # cloudfront_default_certificate = false
+    # minimum_protocol_version = "TLSv1"
+    # ssl_support_method = "sni-only"
+    cloudfront_default_certificate = true
   }
 
   enabled = true

diff --git a/terraform/prod.tfvars b/terraform/prod.tfvars
@@ -0,0 +1,9 @@
+
+environment = "Prod"
+environment_hyphens = "Prod"
+
+create_dns_record = false
+dns_record_subdomain_including_dot = ""
+
+create_redirect_from_www_domain = true
+dns_record_www_domain_including_dot = "www."