data "cloudflare_ip_ranges" "ip_ranges" {}

data "cloudflare_zone" "public_domain" {
  filter = {
    name = var.public_domain_name
  }
}

resource "cloudflare_dns_record" "public_cname_record" {
  zone_id = data.cloudflare_zone.public_domain.zone_id
  name    = "click"
  content = "${var.environment}-${var.service_name}-external.theorchard.io"
  type    = "CNAME"
  proxied = true
  ttl     = 1
}

resource "aws_security_group_rule" "ows_url_shorter_alb_ingress_from_cloudflare_rule" {
  type              = "ingress"
  protocol          = "tcp"
  cidr_blocks       = data.cloudflare_ip_ranges.ip_ranges.ipv4_cidrs
  from_port         = 443
  to_port           = 443
  security_group_id = module.ows_url_shortener_fargate_environment.fargate_load_balancer_security_group_id
}