Add support for passing th domains into rules

ooni · Sep 17, 2024 · ac0001c · ac0001c
1 parent 835f8fe
commit ac0001c
Show file tree

Hide file tree

Showing 3 changed files with 26 additions and 0 deletions.
diff --git a/tf/environments/dev/main.tf b/tf/environments/dev/main.tf
@@ -570,6 +570,8 @@ module "ooniapi_frontend" {
     "8.th.dev.ooni.io" : local.dns_zone_ooni_io
   }
 
+  oonith_domains = ["8.th.dev.ooni.io"]
+
   stage            = local.environment
   dns_zone_ooni_io = local.dns_zone_ooni_io
 

diff --git a/tf/modules/ooniapi_frontend/main.tf b/tf/modules/ooniapi_frontend/main.tf
@@ -43,6 +43,25 @@ resource "aws_alb_listener" "ooniapi_listener_https" {
   tags = var.tags
 }
 
+resource "aws_alb_listener_rule" "ooniapi_th" {
+  listener_arn = aws_alb_listener.ooniapi_listener_https.arn
+  priority     = 90
+
+  action {
+    type             = "forward"
+    target_group_arn = var.oonibackend_proxy_target_group_arn
+  }
+
+  condition {
+    host_header {
+      values = var.oonith_domains
+    }
+  }
+
+  tags = var.tags
+}
+
+
 resource "aws_lb_listener_rule" "ooniapi_oonirun_rule" {
   listener_arn = aws_alb_listener.ooniapi_listener_https.arn
   priority     = 100

diff --git a/tf/modules/ooniapi_frontend/variables.tf b/tf/modules/ooniapi_frontend/variables.tf
@@ -50,3 +50,8 @@ variable "alternative_domains" {
   description = "map of alternate names for the frontend as a map from domain to zone id"
   default     = {}
 }
+
+variable "oonith_domains" {
+  type    = list(string)
+  default = ["*.th.dev.ooni.io"]
+}