variable "aws_region" {
  default     = "us-east-1"
  description = "Which AWS region to spin up the environment in"
}

variable "environment" {
  description = "Available values:  dev, qa, prod."
  default     = "prod"
}

variable "service_name" {
  default = "orcd-cdn"
}

variable "application_family" {
  description = "Application family to which this service belongs."
  default     = "cdn"
}

variable "domain_name" {
  description = "Name of domain"
  default     = "theorchard.io"
}

# Cloudfront settings
variable "allowed_methods" {
  description = "Allowed HTTP methods for Cloudfront"
  default     = ["HEAD", "GET", "OPTIONS"]
}

variable "cached_methods" {
  description = "Cached HTTP methods for Cloudfront"
  default     = ["HEAD", "GET"]
}

variable "default_ttl" {
  description = "Default TTL for objects in absence of cache headers"
  default     = "86400"
}

variable "cloudfront_minimum_protocol_version" {
  description = "Minimum SSL protocol"
  default     = "TLSv1.2_2021"
}

variable "cloudfront_logging_bucket" {
  description = "Bucket to use for cloudfront logging"
  default     = "prod-orcd-cloudfront-logs.s3.amazonaws.com"
}

variable "frontend_content_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-content"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E12KCIKYMMDEKT" # content.theorchard.com
  ]
}

variable "frontend_publishing_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-publishing"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E15AR86DCTULRU", # publishing.theorchard.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E2RCYXVU32WGC5", # publishing.awal.com
  ]
}

variable "frontend_documents_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-documents"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E2B21D2FOULATV", # documents.theorchard.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity ETHTU2JDEPLY6",   # documents.prodawal.com
  ]
}

variable "frontend_settings_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-settings"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity EREVF8G1LE70Y", # settings.theorchard.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E3253YVJLZT4XX", # settings.awal.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity EDOYDJCEOYNU2", # settings.kollectivenr.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E17WGK4OQI535V", # settings.sonymusic.com
  ]
}

variable "frontend_collaborator-suite_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-collaborator-suite"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E28FFJ83W7J999", # collaborators.theorchard.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E282DKAAZYT7BU", # collaborators.prodawal.com
  ]
}

variable "frontend_insights_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-insights"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity EHVL13PY8IM81", # insights.theorchard.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E1PNJKK0K291BC", # insights.prodawal.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E3F3IAXE6I1RXJ", # insights.sonymusic.com
  ]
}

variable "frontend_royalties_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-royalties (abacus)"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E1C1U0IK6RN4HB", # abacus.theorchard.com
  ]
}

variable "frontend_moneyhub_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-moneyhub"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E3RDJ01WYSBOCB", # accounting.theorchard.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity EB4F9XE7ZOW8W", # accounting.awal.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E2ELX9D0KIDE2E", # accounting.kollectivenr.com
  ]
}

variable "frontend_solfege_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-solfege"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E3I1AE47NBYZQH", # solfege.theorchard.com
  ]
}

variable "frontend_workstation_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-workstation"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E1DBPFSHUKPYHU", # workstation.theorchard.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity EFFL010VVEARK", # workstation.prodawal.com
  ]
}

variable "frontend_audience_development_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-audience-development"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E6HO1THN9TVR",   # fansifter.theorchard.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E3OIGW8AWTAUC6", # fansifter.awal.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E137LTRPYR4K1Y", # fansifter.sonymusic.com
  ]
}

variable "frontend_distribution_suite_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-distribution-suite"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E1KCQHGCN7P0FV",   # distribution.theorchard.com
  ]
}

variable "frontend_account360_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-account360"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E2WGHD5SMBAA7R", # account360.theorchard.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E1JOHZZ2IFRFMO", # account360.sonymusic.com
  ]
}

variable "frontend_songwhip_origin_access_identity_id" {
  type        = string
  description = "ID of origin access identity that can access frontend-songwhip"
  default     = "E3K6X07SCFVHMV" # songwhip.theorchard.com
}