feat/prod resources

.github/workflows/pre-commit.yaml

@@ -15,7 +15,7 @@ jobs:
 
       - name: Generate fake ./terraform/live/secrets.auto.tfvars
         run: |
-          echo "project_id_map = { stage = \"mapswipe\" }" > ./terraform/live/secrets.auto.tfvars
+          echo "project_id_map = { stage = \"mapswipe-stage\", prod = \"mapswipe-prod\" }" > ./terraform/live/secrets.auto.tfvars
 
       # TODO: Cache plugins?
       - uses: terraform-linters/setup-tflint@v5

caddy/Caddyfile

@@ -5,26 +5,33 @@
 
 
 {$CADDY_HOST_BACKEND} {
+    encode gzip zstd
+    root * /assets/backend/
+
     request_body {
         max_size 10MB
     }
 
-    handle_path /static/* {
-        root * /assets/backend/static
-        import file_server_config
+    @isStatic {
+        path /static/* /media/*
     }
-
-    handle_path /media/* {
-        root * /assets/backend/media
-        import file_server_config
+    @notStatic {
+        not path /static/* /media/*
     }
+    reverse_proxy @notStatic web:80 {
+        header_up X-Forwarded-Proto https
+    }
+    file_server
 
-    handle {
-        reverse_proxy http://web:80
+    header @isStatic {
+        Access-Control-Allow-Origin "*"
+        Access-Control-Request-Methods "GET"
+        Access-Control-Allow-Headers Content-Type
     }
 }
 
 
+
 {$CADDY_HOST_MANAGER_DASHBOARD} {
     handle {
         try_files {path} /index.html

terraform/README.md

@@ -1,5 +1,6 @@
 ## Project ID
 
+**live/secrets.auto.tfvars**
 ```hcl
 project_id_map = {
     stage = "project-id-not-number"
@@ -9,10 +10,22 @@ project_id_map = {
 
 ## Apply changes
 
+### Stage
+
 ```bash
 cd live/stage
 
 terragrunt plan
 
 terragrunt apply
 ```
+
+### Prod
+
+```bash
+cd live/prod
+
+terragrunt plan
+
+terragrunt apply
+```

terraform/live/prod/terragrunt.hcl

@@ -0,0 +1,10 @@
+include "root" {
+  path = find_in_parent_folders("terragrunt.root.hcl")
+}
+
+terraform {
+  source = "../../resources"
+}
+
+inputs = {
+}

terraform/resources/postgres-backup.tf

@@ -1,19 +1,9 @@
 resource "google_storage_bucket" "db_backup_bucket_name" {
-  name     = "mapswipe-postgres-backups-${var.env_name}"
-  location = var.gcs_region
-  # storage_class = "NEARLINE"
+  name          = "mapswipe-postgres-backups-${var.env_name}"
+  location      = var.gcs_region
+  storage_class = "COLDLINE"
 
   uniform_bucket_level_access = true
-
-  lifecycle_rule {
-    action {
-      type = "Delete"
-    }
-    condition {
-      age = 7
-    }
-  }
-
 }
 
 resource "google_service_account" "db_backup_sa" {