feat(terraform/cloudflare): Configure DNS Records

terraform/cloudflare/backend.tf

@@ -0,0 +1,6 @@
+terraform {
+  backend "pg" {
+    conn_str    = "postgres://terraform:[email protected]:5432/terraform?sslmode=disable"
+    schema_name = "cloudflare"
+  }
+}

terraform/cloudflare/mirceaanton.tf

@@ -0,0 +1,42 @@
+data "cloudflare_zone" "mirceaanton" {
+  name = "mirceaanton.com"
+}
+
+# =================================================================================================
+# Various TXT Verifications
+# =================================================================================================
+resource "cloudflare_record" "mirceaanton_TXT_verifications" {
+  for_each = {
+    "Google Verification" = {
+      name    = "@",
+      content = "\"${var.google_verification_mirceaanton}\""
+    }
+  }
+
+  zone_id = data.cloudflare_zone.mirceaanton.id
+  type    = "TXT"
+  proxied = false
+
+  name    = each.value.name
+  comment = "Terraform: ${each.key}"
+  content = each.value.content
+}
+
+
+# =================================================================================================
+# GitHub Pages
+# =================================================================================================
+resource "cloudflare_record" "mirceaanton_redirects" {
+  for_each = {
+    "WWW"  = { name = "www", type = "CNAME", content = "mirceanton.com" },
+    "Root" = { name = "@", type = "CNAME", content = "mirceanton.com" },
+  }
+
+  zone_id = data.cloudflare_zone.mirceaanton.id
+  proxied = false
+
+  type    = each.value.type
+  name    = each.value.name
+  content = each.value.content
+  comment = "Terraform: Redirect ${each.key}"
+}

terraform/cloudflare/mirceanton.tf

@@ -0,0 +1,55 @@
+data "cloudflare_zone" "mirceanton" {
+  name = "mirceanton.com"
+}
+
+# =================================================================================================
+# Various TXT Verifications
+# =================================================================================================
+resource "cloudflare_record" "mirceanton_TXT_verifications" {
+  for_each = {
+    "Discord Verification" = {
+      name    = "_discord.com",
+      content = "\"${var.discord_verification_mirceanton}\""
+    },
+    "Google Verification" = {
+      name    = "@",
+      content = "\"${var.google_verification_mirceanton}\""
+    }
+  }
+
+  zone_id = data.cloudflare_zone.mirceanton.id
+  type    = "TXT"
+  proxied = false
+
+  name    = each.value.name
+  comment = "Terraform: ${each.key}"
+  content = each.value.content
+}
+
+# =================================================================================================
+# GitHub Pages
+# =================================================================================================
+resource "cloudflare_record" "mirceanton_github_pages" {
+  for_each = {
+    "WWW" = { name = "www", type = "CNAME", content = "mirceanton.github.io" },
+
+    "Verification" = {
+      name    = "_github-pages-challenge-mirceanton",
+      type    = "TXT",
+      content = "\"${var.github_verification_mirceanton}\""
+    }
+
+    "A1" = { name = "@", type = "A", content = "185.199.111.153" }
+    "A2" = { name = "@", type = "A", content = "185.199.110.153" }
+    "A3" = { name = "@", type = "A", content = "185.199.109.153" }
+    "A4" = { name = "@", type = "A", content = "185.199.108.153" }
+  }
+
+  zone_id = data.cloudflare_zone.mirceanton.id
+  proxied = false
+
+  type    = each.value.type
+  name    = each.value.name
+  content = each.value.content
+  comment = "Terraform: GitHub Pages ${each.key}"
+}

terraform/cloudflare/provider.tf

@@ -0,0 +1,12 @@
+terraform {
+  required_providers {
+    cloudflare = {
+      source  = "cloudflare/cloudflare"
+      version = "4.49.1"
+    }
+  }
+}
+
+provider "cloudflare" {
+  api_token = var.cloudflare_api_token
+}

terraform/cloudflare/variables.tf

@@ -0,0 +1,36 @@
+# =================================================================================================
+# Provider Configuration
+# =================================================================================================
+variable "cloudflare_api_token" {
+  type        = string
+  sensitive   = true
+  description = "API Token to authenticate against CloudFlare"
+}
+
+# =================================================================================================
+# Main Domain Verifications
+# =================================================================================================
+variable "github_verification_mirceanton" {
+  type        = string
+  sensitive   = true
+  description = "Content for the TXT record needed for GitHub Pages verification."
+}
+variable "google_verification_mirceanton" {
+  type        = string
+  sensitive   = true
+  description = "Content for the TXT record needed for Google verification."
+}
+variable "discord_verification_mirceanton" {
+  type        = string
+  sensitive   = true
+  description = "Content for the TXT record needed for Discord verification."
+}
+
+# =================================================================================================
+# Secondary Domain Verifications
+# =================================================================================================
+variable "google_verification_mirceaanton" {
+  type        = string
+  sensitive   = true
+  description = "Content for the TXT record needed for Google verification."
+}