DNS infrastructure terraform files

infra/.gitignore

@@ -0,0 +1 @@
+plan.just

infra/dns/main.tf

@@ -0,0 +1,58 @@
+terraform {
+  required_providers {
+    gandi = {
+      version = "~> 2.3.0"
+      source  = "go-gandi/gandi"
+    }
+  }
+}
+variable "gandi_pat" {
+  type      = string
+  sensitive = true
+}
+
+provider "gandi" {
+  personal_access_token = var.gandi_pat
+}
+
+
+variable "domain" {
+  type = string
+}
+
+data "gandi_domain" "this" {
+  name = var.domain
+}
+
+resource "gandi_livedns_record" "a" {
+  name = "@"
+  type = "A"
+  ttl  = 3600
+  values = [
+    "185.199.110.153",
+    "185.199.111.153",
+    "185.199.109.153",
+    "185.199.108.153",
+  ]
+  zone = data.gandi_domain.this.name
+}
+
+resource "gandi_livedns_record" "www" {
+  name = "www"
+  type = "CNAME"
+  ttl  = 3600
+  values = [
+    "hamcrest.github.io."
+  ]
+  zone = data.gandi_domain.this.name
+}
+
+resource "gandi_livedns_record" "github_pages" {
+  name = "_github-pages-challenge-hamcrest"
+  type = "TXT"
+  ttl  = 10800
+  values = [
+    "\"109f0d722de274783b6d3065b747a2\""
+  ]
+  zone = data.gandi_domain.this.name
+}

infra/domain/main.tf

@@ -0,0 +1,13 @@
+variable "domain" {
+  type = string
+}
+
+variable "name_servers" {
+  type = list(string)
+}
+
+resource "null_resource" "updatens-domain" {
+  provisioner "local-exec" {
+    command = "aws route53domains update-domain-nameservers --region us-east-1 --domain-name ${var.domain} --nameservers Name=${var.name_servers.0} Name=${var.name_servers.1} Name=${var.name_servers.2} Name=${var.name_servers.3}"
+  }
+}

infra/main.tf

@@ -0,0 +1,33 @@
+terraform {
+  required_providers {
+    aws = {
+      source  = "aws"
+      version = ">= 4.67.0"
+    }
+  }
+  required_version = ">= 1.13"
+
+  backend "s3" {
+    bucket  = "terraform.offby1.net"
+    key     = "hamcrest.org/state.tfstate"
+    region  = "us-west-2"
+    profile = "hamcrest"
+  }
+}
+
+provider "aws" {
+  profile = "hamcrest"
+  region  = "us-west-2"
+}
+
+variable "gandi_pat" {
+  type      = string
+  sensitive = true
+}
+
+module "dns" {
+  source    = "./dns/"
+  domain    = "hamcrest.org"
+  gandi_pat = var.gandi_pat
+}
+

justfile

@@ -0,0 +1,30 @@
+venv_path := justfile_directory() / ".venv"
+set dotenv-load := true
+
+terraform := "terraform -chdir=" + justfile_directory() / "infra"
+
+default:
+    just --choose
+
+bootstrap:
+    {{ terraform}} init
+
+_make_plan:
+    #!/bin/bash
+    rm -f plan.just 2>/dev/null
+    plan_logs_file=$(mktemp)
+    trap 'rm -f "$plan_logs_file"' EXIT
+    {{terraform}} plan -out plan.just >"$plan_logs_file" 2>&1
+    if [ $? -ne 0 ]; then
+        echo "Error during terraform plan. See logs:"
+        cat "$plan_logs_file"
+        exit 1
+    fi
+
+show-plan:
+    @{{terraform}} show plan.just
+
+plan: _make_plan && show-plan
+
+apply:
+    {{terraform}} apply plan.just

mise.toml

@@ -0,0 +1,2 @@
+[tools]
+terraform = "1.13"