# General settings
variable "aws_region" {
  default     = "us-west-2"
  description = "Which AWS region to spin up the environment in"
}

variable "environment" {
  description = "Available values:  dev, qa, prod."
  default     = "qa"
}

variable "service_name" {
  default = "orcd-cdn-us-west01"
}

variable "application_family" {
  description = "Application family to which this service belongs."
  default     = "cdn"
}

variable "domain_name" {
  description = "Name of domain"
  default     = "theorchard.io"
}

# Cloudfront settings
variable "allowed_methods" {
  description = "Allowed HTTP methods for Cloudfront"
  default     = ["HEAD", "GET", "OPTIONS"]
}

variable "cached_methods" {
  description = "Cached HTTP methods for Cloudfront"
  default     = ["HEAD", "GET"]
}

variable "default_ttl" {
  description = "Default TTL for objects in absence of cache headers"
  default     = "86400"
}

variable "cloudfront_minimum_protocol_version" {
  description = "Minimum SSL protocol"
  default     = "TLSv1.2_2021"
}

variable "cloudfront_logging_bucket" {
  description = "Bucket to use for cloudfront logging"
  default     = "prod-orcd-cloudfront-logs.s3.amazonaws.com"
}

# Bucket policy settings
variable "frontend_content_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-content"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity EQGL0A092ZDEL", # content.qaorch.com
  ]
}

variable "frontend_insights_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-insights"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E31W3TSSVUYWM4", # insights.qaoverdrive.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E347I2O91Z5RLP", # insights.qaawal.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity EXZPOI9SYTO8G",  # insights.qaorch.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E3DQQUXOI4Y0TB",  # insights.qapdesuite.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E16LIS2Z2VOCWG",  # insights.qapdesuite.com
  ]
}

variable "frontend_podcast_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-podcast"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E2XZA7FB4I5AQ5", # sonymusic.qaoverdrive.com
  ]
}

variable "frontend_settings_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-settings"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity ETV3F2MOFQC9E",  # settings.qaoverdrive.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E21MQIPPS26OZ4", # settings.qaawal.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E3QMNAY5UGTUJT", # settings.qaorch.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E28ZW28IMXC4CS", # settings.qakollectivenr.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity EYSBXHBYJA4TO", # settings.qapdesuite.com
  ]
}

variable "frontend_moneyhub_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-moneyhub"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E8ACTT68UE78Z", # moneyhub.qaorch.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity EANM4PXXLZ6MZ", # moneyhub.qaawal.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity EEMIM7TK24SRU", # moneyhub.qakollectivenr.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity ESXQMOJDFOTH4", # moneyhub.qapdesuite.com
  ]
}


variable "frontend_collaborator-suite_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-collaborator-suite"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E1DSBOQXR54UQS", # collaborators.qaorch.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E3GAFA1M6TBOON", # collaborators.qaawal.com
  ]
}


variable "frontend_publishing_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-publishing"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E31SRE525856TI", # publishing.qaorch.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E2ILQL1S1ODLYQ", # publishing.qaawal.com
  ]
}

variable "frontend_royalties_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-royalties"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E1V9VVR7BPPPHW", # abacus.qaorch.com
  ]
}

variable "frontend_documents_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-documents"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E168QBFVYZQMNX", # documents.qaorch.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E1VQ2TFKQQQLRV", # documents.qaawal.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E2ZWQ8UDY2RK3W", # documents.qapdesuite.com
  ]
}

variable "frontend_playground_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-playground"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E1RUDJWDMIVVPM", # playground.qaorch.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E3BH593E2CJRHF", # playground.qaawal.com
  ]
}

variable "frontend_audience_development_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-audience-development"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E2JSNGCPPX72XL", # fansifter.qaorch.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E27KA4E2HPH52I", # fansifter.qaawal.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E65H0XRTC0R6S",  # fansifter.qapdesuite.com
  ]
}

variable "frontend_distribution_suite_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-distribution-suite"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E23EJSFH1K30DU", # distribution.qaorch.com
  ]
}

variable "kdh_docs_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access kdh-docs"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E2RKEWQJC88WV0", # kdh-docs.qaorch.com
  ]
}

variable "frontend_account360_origin_access_identity_arns" {
  type        = list(string)
  description = "Origin access identity ARNs that can access frontend-account360"
  default = [
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E1P0P6ZXMUI82E", # account360.qaorch.com
    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E25KG9D9ZT03R6", # account360.qapdesuite.com
  ]
}

variable "frontend_seat_origin_access_identity_id" {
  type        = string
  description = "ID of origin access identity that can access frontend-seat"
  default     = "E2HZ47YAA7ET6R" # seat.qapdesuite.com
}

variable "frontend_songwhip_origin_access_identity_id" {
  type        = string
  description = "ID of origin access identity that can access frontend-songwhip"
  default     = "EWNBUFWMOTJ1" # songwhip.qapdesuite.com
}