# General settings
variable "aws_region" {
  default     = "us-east-1"
  description = "Which AWS region to spin up the environment in"
}

variable "environment" {
  description = "Available values:  dev, qa, prod."
  default     = "qa"
}

variable "service_name" {
  default = "orcd-cdn"
}

variable "application_family" {
  description = "Application family to which this service belongs."
  default     = "cdn"
}

variable "domain_name" {
  description = "Name of domain"
  default     = "theorchard.io"
}

# Cloudfront settings
variable "allowed_methods" {
  description = "Allowed HTTP methods for Cloudfront"
  default     = ["HEAD", "GET", "OPTIONS"]
}

variable "cached_methods" {
  description = "Cached HTTP methods for Cloudfront"
  default     = ["HEAD", "GET"]
}

variable "default_ttl" {
  description = "Default TTL for objects in absence of cache headers"
  default     = "86400"
}

variable "cloudfront_minimum_protocol_version" {
  description = "Minimum SSL protocol"
  default     = "TLSv1.2_2021"
}

variable "cloudfront_logging_bucket" {
  description = "Bucket to use for cloudfront logging"
  default     = "prod-orcd-cloudfront-logs.s3.amazonaws.com"
}

# Bucket policy settings
variable "frontend_content_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-content"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E3MUYERUPZRRGI", # content.qaorch.com
  ]
}

variable "frontend_insights_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-insights"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E1VFBO6B0LLRT4", # insights.qaoverdrive.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E6IYFZ9LL24M0",  # insights.qaawal.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E1YO3DR9AWM25P", # insights.qaorch.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E3DQQUXOI4Y0TB",  # insights.qapdesuite.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E16LIS2Z2VOCWG",  # insights.qapdesuite.com
  ]
}

variable "frontend_podcast_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-podcast"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E3O8RMAD2S2DMI", # sonymusic.qaoverdrive.com
  ]
}

variable "frontend_settings_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-settings"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E2JFL29BX1TPXP", # settings.qaoverdrive.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E53PNQHT05SOW",  # settings.qaawal.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity EF4U0UZ0JIMA9",  # settings.qakollectivenr.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E1BSKHVF8P11OC", # settings.qaorch.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E3UR9DS6MF0WRE", # settings.qapdesuite.com
  ]
}


variable "frontend_moneyhub_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-moneyhub"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E1T14399H6UJIR", # moneyhub.qaorch.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E802TOZBUODN",   # moneyhub.qaawal.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E14DUPCLYPY9GB", # moneyhub.qakollectivenr.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E1OW171BAAU8EJ", # moneyhub.qapdesuite.com
  ]
}


variable "frontend_collaborator-suite_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-collaborator-suite"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E3OXWIENT3AIW", # collaborators.qaorch.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity EAP25XOLC3A6R", # collaborators.qaawal.com
  ]
}


variable "frontend_publishing_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-publishing"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E3BLBCPXQLY4RB", # publishing.qaorch.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity EVEN63MOUMQYH", # publishing.qaawal.com
  ]
}

variable "frontend_royalties_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-royalties"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E1D5PKF4LK93RX", # abacus.qaorch.com
  ]
}

variable "frontend_documents_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-documents"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E219CJFEOM8JGU", # documents.qaorch.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E2I8O1B5F7YDX2", # documents.qaawal.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity EOVMETBEZRHBV", # documents.qapdesuite.com
  ]
}

variable "frontend_playground_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-playground"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity ETE0AQEP65LUT",  # playground.qaorch.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E2B7FR7NLEPJ4A", # playground.qaawal.com
  ]
}

variable "frontend_audience_development_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-audience-development"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E8BY42M1Y1L64",  # fansifter.qaorch.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E2DPV5FVLVCPK",  # fansifter.qaawal.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E2GINWN0QHLPZ3", # fansifter.qapdesuite.com
  ]
}

variable "frontend_distribution_suite_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-distribution-suite"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity EV1MZIE9UQE7C", # distribution.qaorch.com
  ]
}

variable "kdh_docs_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access kdh-docs"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E321EA49C170QN", # kdh-docs.qaorch.com
  ]
}

variable "frontend_account360_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-account360"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E19ZTU2HN2AXYZ", # account360.qaorch.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E23J9HIZGFYNUV", # account360.qapdesuite.com
  ]
}

variable "frontend_seat_origin_access_identity_id" {
  type        = string
  description = "ID of origin access identity that can access frontend-seat"
  default     = "EKK9927133OEX" # seat.qapdesuite.com
}

variable "frontend_songwhip_origin_access_identity_id" {
  type        = string
  description = "ID of origin access identity that can access frontend-songwhip"
  default     = "E10KEE8HJ3LWDV" # songwhip.qapdesuite.com
}