main.tf

terraform {
  required_providers {
    aws = {
      source  = "hashicorp/aws"
      version = "~> 5.0"
    }
  }
}

# Configure the AWS Provider
provider "aws" {
  region = "ap-northeast-2"
}

/*
# Create a VPC
resource "aws_vpc" "example" {
  cidr_block = "10.0.0.0/16"
}
*/

resource "aws_s3_bucket" "tf_bucket" {
  bucket = "tf-files-for-nginx-expressjs-project"

  tags = {
    Name        = "expressjs project website bucket"
    Environment = "Dev"
  }
}

resource "aws_s3_object" "index_html" {
  bucket = aws_s3_bucket.tf_bucket.id
  key    = "index.html"
  source = "../S3_files/index.html"
  content_type = "text/html"

  # The filemd5() function is available in Terraform 0.11.12 and later
  # For Terraform 0.11.11 and earlier, use the md5() function and the file() function:
  # etag = "${md5(file("path/to/file"))}"
  etag = filemd5("../S3_files/index.html")
}

resource "aws_s3_object" "home_html" {
  bucket = aws_s3_bucket.tf_bucket.id
  key    = "home.html"
  source = "../S3_files/home.html"
  content_type = "text/html"

  # The filemd5() function is available in Terraform 0.11.12 and later
  # For Terraform 0.11.11 and earlier, use the md5() function and the file() function:
  # etag = "${md5(file("path/to/file"))}"
  etag = filemd5("../S3_files/home.html")
}

resource "aws_s3_object" "script_js" {
  bucket = aws_s3_bucket.tf_bucket.id
  key    = "script.js"
  source = "../S3_files/script.js"
  content_type = "application/javascript"

  # The filemd5() function is available in Terraform 0.11.12 and later
  # For Terraform 0.11.11 and earlier, use the md5() function and the file() function:
  # etag = "${md5(file("path/to/file"))}"
  etag = filemd5("../S3_files/script.js")
}

resource "aws_s3_object" "style_css" {
  bucket = aws_s3_bucket.tf_bucket.id
  key    = "style.css"
  source = "../S3_files/style.css"
  content_type = "text/css"

  # The filemd5() function is available in Terraform 0.11.12 and later
  # For Terraform 0.11.11 and earlier, use the md5() function and the file() function:
  # etag = "${md5(file("path/to/file"))}"
  etag = filemd5("../S3_files/style.css")
}


resource "aws_s3_bucket_website_configuration" "website_config" {
  bucket = aws_s3_bucket.tf_bucket.id

  index_document {
    suffix = "index.html"
  }

  error_document {
    key = "error.html"
  }

}

data "aws_iam_policy_document" "policy_document" {
  statement {
    sid = "PublicReadGetObject"

    actions = [
      "s3:GetObject"
    ]

    resources = [
      "arn:aws:s3:::tf-files-for-nginx-expressjs-project/*"
    ]

    principals {
      type = "AWS"
      identifiers = ["*"]
    }
  }
}

resource "aws_s3_bucket_policy" "attach_policy_to_s3" {
  bucket = aws_s3_bucket.tf_bucket.id
  policy = data.aws_iam_policy_document.policy_document.json
}

resource "aws_s3_bucket_public_access_block" "public_access" {
  bucket = aws_s3_bucket.tf_bucket.id

  block_public_acls       = true
  block_public_policy     = false
  ignore_public_acls      = true
  restrict_public_buckets = false
}



locals {
  s3_origin_id = "S3Origin"
}

locals {
  ALB_origin_id = "ALBOrigin"
}

variable "lb_arn" {
  type    = string
  default = "arn:aws:elasticloadbalancing:ap-northeast-2:533267359186:loadbalancer/app/expressjsLB/8f25a781c4a32738"
}

variable "lb_name" {
  type    = string
  default = "expressjsLB"
}

data "aws_lb" "api_alb" {
  arn  = var.lb_arn
  name = var.lb_name
}

resource "aws_cloudfront_distribution" "s3_expressjs_distribution" {
  origin {
    domain_name              = aws_s3_bucket.tf_bucket.bucket_domain_name
    origin_id                = local.s3_origin_id
  }

  origin {
    domain_name              = data.aws_lb.api_alb.dns_name
    origin_id                = local.ALB_origin_id
    custom_origin_config {
      http_port = 80
      https_port =  443
      origin_protocol_policy = "http-only"
      origin_ssl_protocols = ["SSLv3", "TLSv1", "TLSv1.1", "TLSv1.2"]
    }
  }

  enabled             = true
  is_ipv6_enabled     = true
  comment             = "terraform implementation of s3 and cloudfront part of nginx_expressjs project"
  default_root_object = "index.html"

  default_cache_behavior {
    allowed_methods  = ["HEAD", "GET"]
    cached_methods   = ["HEAD", "GET"]
    target_origin_id = local.s3_origin_id
    viewer_protocol_policy = "redirect-to-https"

    forwarded_values {
      query_string = false

      cookies {
        forward = "none"
      }
    }
    min_ttl                = 0
    default_ttl            = 3600
    max_ttl                = 86400
  }

  # Cache behavior with precedence 0
  
  ordered_cache_behavior {
    path_pattern     = "/api/*"
    allowed_methods  = ["HEAD", "DELETE", "POST", "GET", "OPTIONS", "PUT", "PATCH"]
    cached_methods   = ["HEAD", "GET"]
    target_origin_id = local.ALB_origin_id
    viewer_protocol_policy = "redirect-to-https"

    forwarded_values {
      query_string = false
      headers      = ["Origin"]

      cookies {
        forward = "all"
      }
    }

    min_ttl                = 0
    default_ttl            = 86400
    max_ttl                = 31536000
    compress               = true
  }

  price_class = "PriceClass_200"

  restrictions {
    geo_restriction {
      restriction_type = "whitelist"
      locations        = ["US", "JP", "KR"]
    }
  }

  tags = {
    Environment = "production"
  }

  viewer_certificate {
    cloudfront_default_certificate = true
  }
}