mirror of
https://github.com/roleypoly/roleypoly.git
synced 2025-06-14 16:49:10 +00:00
Refactor node packages to yarn workspaces & ditch next.js for CRA. (#161)
* chore: restructure project into yarn workspaces, remove next * fix tests, remove webapp from terraform * remove more ui deployment bits * remove pages, fix FUNDING.yml * remove isomorphism * remove next providers * fix linting issues * feat: start basis of new web ui system on CRA * chore: move types to @roleypoly/types package * chore: move src/common/utils to @roleypoly/misc-utils * chore: remove roleypoly/ path remappers * chore: renmove vercel config * chore: re-add worker-types to api package * chore: fix type linting scope for api * fix(web): craco should include all of packages dir * fix(ci): change api webpack path for wrangler * chore: remove GAR actions from CI * chore: update codeql job * chore: test better github dar matcher in lint-staged
This commit is contained in:
GitHub
parent
49e308507e
commit
2ff6588030
328 changed files with 16624 additions and 3525 deletions
|
|
@ -1,20 +0,0 @@
|
|||
resource "tls_private_key" "tls_pk" {
|
||||
algorithm = "RSA"
|
||||
}
|
||||
|
||||
resource "tls_cert_request" "web_csr" {
|
||||
key_algorithm = tls_private_key.tls_pk.algorithm
|
||||
private_key_pem = tls_private_key.tls_pk.private_key_pem
|
||||
|
||||
subject {
|
||||
common_name = "web-${var.environment_tag}.roleypoly.com"
|
||||
organization = "Roleypoly"
|
||||
}
|
||||
}
|
||||
|
||||
resource "cloudflare_origin_ca_certificate" "web" {
|
||||
csr = tls_cert_request.web_csr.cert_request_pem
|
||||
hostnames = var.ui_hostnames
|
||||
request_type = "origin-rsa"
|
||||
requested_validity = 365 * 15
|
||||
}
|
||||
|
|
@ -1,60 +0,0 @@
|
|||
locals {
|
||||
uiTag = var.ui_tag == "" ? ":${var.environment_tag}" : var.ui_tag
|
||||
}
|
||||
|
||||
resource "google_cloud_run_service" "web" {
|
||||
for_each = toset(var.ui_regions)
|
||||
|
||||
name = "roleypoly-web-${var.environment_tag}-${each.key}"
|
||||
location = each.key
|
||||
|
||||
template {
|
||||
spec {
|
||||
containers {
|
||||
image = "${local.artifactBaseMap[each.key]}/ui${local.uiTag}"
|
||||
|
||||
env {
|
||||
name = "API_PUBLIC_URI"
|
||||
value = var.api_public_uri
|
||||
}
|
||||
|
||||
env {
|
||||
name = "UI_PUBLIC_URI"
|
||||
value = var.ui_public_uri
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
metadata {
|
||||
annotations = {
|
||||
"autoscaling.knative.dev/maxScale" = "10"
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
traffic {
|
||||
percent = 100
|
||||
latest_revision = true
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
|
||||
data "google_iam_policy" "noauth" {
|
||||
binding {
|
||||
role = "roles/run.invoker"
|
||||
members = [
|
||||
"allUsers",
|
||||
]
|
||||
}
|
||||
}
|
||||
|
||||
resource "google_cloud_run_service_iam_policy" "noauth" {
|
||||
for_each = toset(var.ui_regions)
|
||||
|
||||
location = google_cloud_run_service.web[each.key].location
|
||||
project = google_cloud_run_service.web[each.key].project
|
||||
service = google_cloud_run_service.web[each.key].name
|
||||
|
||||
policy_data = data.google_iam_policy.noauth.policy_data
|
||||
}
|
||||
|
|
@ -1,125 +0,0 @@
|
|||
// Maps all requests to the backend service
|
||||
resource "google_compute_url_map" "web_lb" {
|
||||
name = "lb-um-web-${var.environment_tag}"
|
||||
|
||||
host_rule {
|
||||
hosts = var.ui_hostnames
|
||||
path_matcher = "path-matcher-1" // Matching google console due to bug with mutating url_maps
|
||||
}
|
||||
|
||||
path_matcher {
|
||||
name = "path-matcher-1"
|
||||
default_service = google_compute_backend_service.web_lb.id
|
||||
}
|
||||
|
||||
// Blackhole. No addresses will ever be this, and hosts without IPv6 will fail regardless.
|
||||
// Not matching the host_rule should be seen as treason.
|
||||
default_url_redirect {
|
||||
host_redirect = "[100::]"
|
||||
path_redirect = "/"
|
||||
strip_query = true
|
||||
}
|
||||
}
|
||||
|
||||
// Regional load balancer
|
||||
resource "google_compute_backend_service" "web_lb" {
|
||||
name = "lb-rbes-web-${var.environment_tag}"
|
||||
|
||||
dynamic "backend" {
|
||||
for_each = toset(var.ui_regions)
|
||||
content {
|
||||
group = google_compute_region_network_endpoint_group.web_lb[backend.value].id
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
// Origin TLS cert from Cloudflare
|
||||
resource "google_compute_ssl_certificate" "origin_tls" {
|
||||
name_prefix = "cf-origin-web-${var.environment_tag}-"
|
||||
private_key = tls_private_key.tls_pk.private_key_pem
|
||||
certificate = cloudflare_origin_ca_certificate.web.certificate
|
||||
|
||||
lifecycle {
|
||||
create_before_destroy = true
|
||||
}
|
||||
}
|
||||
|
||||
// HTTPS proxy
|
||||
resource "google_compute_target_https_proxy" "web_lb" {
|
||||
name = "lb-http-web-${var.environment_tag}"
|
||||
url_map = google_compute_url_map.web_lb.id
|
||||
ssl_certificates = [google_compute_ssl_certificate.origin_tls.id]
|
||||
}
|
||||
|
||||
// Static IPs, Anycast
|
||||
resource "google_compute_global_address" "web_lb-ipv4" {
|
||||
name = "lb-ga-web-ipv4-${var.environment_tag}"
|
||||
ip_version = "IPV4"
|
||||
}
|
||||
|
||||
resource "google_compute_global_address" "web_lb-ipv6" {
|
||||
name = "lb-ga-web-ipv6-${var.environment_tag}"
|
||||
ip_version = "IPV6"
|
||||
}
|
||||
|
||||
// Forwarding rules (if request on 443, send to proxy)
|
||||
resource "google_compute_global_forwarding_rule" "web_lb-ipv4" {
|
||||
provider = google-beta
|
||||
|
||||
name = "lb-fr-web-ipv4-${var.environment_tag}"
|
||||
target = google_compute_target_https_proxy.web_lb.self_link
|
||||
port_range = "443"
|
||||
ip_address = google_compute_global_address.web_lb-ipv4.address
|
||||
}
|
||||
|
||||
|
||||
resource "google_compute_global_forwarding_rule" "web_lb-ipv6" {
|
||||
provider = google-beta
|
||||
|
||||
name = "lb-fr-web-ipv6-${var.environment_tag}"
|
||||
target = google_compute_target_https_proxy.web_lb.self_link
|
||||
port_range = "443"
|
||||
ip_address = google_compute_global_address.web_lb-ipv6.address
|
||||
}
|
||||
|
||||
// Cloudflare DNS records
|
||||
|
||||
locals {
|
||||
// for web-example.roleypoly.com, grab the .roleypoly.com. This may break for .co.uk, etc, so don't use that. :)
|
||||
uiDNSReplace = regex("\\.[a-z0-9-]+\\.[a-z]+$", var.ui_hostnames[0])
|
||||
}
|
||||
|
||||
resource "cloudflare_record" "web-ipv4" {
|
||||
for_each = toset(var.ui_hostnames)
|
||||
zone_id = var.cloudflare_zone_id
|
||||
name = replace(each.value, local.uiDNSReplace, "")
|
||||
type = "A"
|
||||
value = google_compute_global_forwarding_rule.web_lb-ipv4.ip_address
|
||||
proxied = true
|
||||
}
|
||||
|
||||
resource "cloudflare_record" "web-ipv6" {
|
||||
for_each = toset(var.ui_hostnames)
|
||||
zone_id = var.cloudflare_zone_id
|
||||
name = replace(each.value, local.uiDNSReplace, "")
|
||||
type = "AAAA"
|
||||
value = google_compute_global_forwarding_rule.web_lb-ipv6.ip_address
|
||||
proxied = true
|
||||
}
|
||||
|
||||
// Regional groups so the backend service knows what it can route to for a given region
|
||||
resource "google_compute_region_network_endpoint_group" "web_lb" {
|
||||
provider = google-beta
|
||||
for_each = toset(var.ui_regions)
|
||||
|
||||
lifecycle {
|
||||
create_before_destroy = true
|
||||
}
|
||||
|
||||
name = "lb-fr-neg-${each.key}-${var.environment_tag}"
|
||||
region = google_cloud_run_service.web[each.key].location
|
||||
network_endpoint_type = "SERVERLESS"
|
||||
cloud_run {
|
||||
service = google_cloud_run_service.web[each.key].name
|
||||
}
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue