Add comment on what's done in prod

ooni · Oct 1, 2024 · 9d580d7 · 9d580d7
1 parent df6a4ef
commit 9d580d7
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/tf/environments/prod/main.tf b/tf/environments/prod/main.tf
@@ -598,7 +598,9 @@ module "ooniapi_frontend" {
  "6.th.ooni.org" : local.dns_root_zone_ooni_org,
  }
 
- oonith_domains = ["5.th.ooni.org", "6.th.ooni.org"]
+ oonith_domains = [
+ "*.th.ooni.org",
+ ]
 
  stage = local.environment
  dns_zone_ooni_io = local.dns_zone_ooni_io

diff --git a/tf/modules/ooniapi_frontend/main.tf b/tf/modules/ooniapi_frontend/main.tf
@@ -35,6 +35,8 @@ resource "aws_alb_listener" "ooniapi_listener_https" {
  protocol = "HTTPS"
  ssl_policy = "ELBSecurityPolicy-2016-08"
  certificate_arn = module.ooniapi_acm_certificate.certificate_arn
+ # In prod this has been manually applied
+ #certificate_arn = "arn:aws:acm:eu-central-1:471112720364:certificate/8aad2e93-ea3a-48eb-be88-7fd2b1fff0cb"
 
  default_action {
  target_group_arn = var.oonibackend_proxy_target_group_arn