provider "aws" {
  region = var.aws_region
}

# Terraform backends cannot contain interpolations
terraform {
  backend "s3" {
    bucket  = "orcd-terraform-state"
    key     = "prod/github/bacon/terraform.tfstate"
    region  = "us-east-1"
    encrypt = "true"
  }
}

module "github_repositories" {
  source                           = "git@github.com:theorchard/terraform-github.git//?ref=4.0.0"
  application_family               = var.application_family
  delete_branch_on_merge           = false
  allow_rebase_merge               = true
  restrict_dismissals              = true
  repository_name                  = var.service_name
  branch_protection_enabled        = true
  branch_protection_enforce_admins = true
  has_downloads                    = true
  archived_repository              = false
  github_code_owner_reviews        = false
  github_push_teams                = ["mergers", "royalties"]
  description                      = var.service_name
  homepage_url                     = "https://github.com/theorchard/${var.service_name}"
  default_code_owner               = "royalties"
}

resource "github_repository_deploy_key" "deploy_key" {
  title      = "ec2-deploy-key"
  repository = var.service_name
  key        = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJ+k1KOoMb982YIsZajA26KsQxACcDyyL249He1nFk01"
  read_only  = true
}