From 02e78106741a4a06860b738341101bb302532c2b Mon Sep 17 00:00:00 2001 From: Phillip Shipley Date: Mon, 21 Dec 2020 17:27:31 -0500 Subject: [PATCH 1/2] aparently for origin protocol version I cannot use the extended 1.2 version --- vars.tf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/vars.tf b/vars.tf index 700b9fd..f773bf4 100644 --- a/vars.tf +++ b/vars.tf @@ -116,7 +116,7 @@ variable "origin_path" { variable "origin_ssl_protocols" { type = list(string) description = "List of Origin SSL policies for Cloudfront distribution. See https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValues-security-policy for options" - default = ["TLSv1.2_2019"] + default = ["TLSv1.2"] } variable "routing_rules" { From 15c247f27bf1cef77f765c1c9daf9fd116a62fa8 Mon Sep 17 00:00:00 2001 From: Phillip Shipley Date: Mon, 21 Dec 2020 17:29:22 -0500 Subject: [PATCH 2/2] update readme for changed default optional variable value --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index ed0bc6b..69b89dd 100644 --- a/README.md +++ b/README.md @@ -26,7 +26,7 @@ supports S3 redirects. This module helps keep setup consistent for multiple Hugo - `index_document` - The default file to be served. Default: `index.html` - `minimum_viewer_tls_version` - Minimum TLS version for viewers connecting to CloudFront. Default: `TLSv1.2_2019` - `origin_path` - Path to document root in S3 bucket without slashes. Default: `public` - - `origin_ssl_protocols` - List of SSL protocols to enable on Cloudfront distribution. Default: `TLSv1.2_2019` + - `origin_ssl_protocols` - List of SSL protocols to enable on Cloudfront distribution. Default: `TLSv1.2` - `routing_rules` - A json array containing routing rules describing redirect behavior and when redirects are applied. Default routes `/` to `index.html` - `viewer_protocol_policy` - One of allow-all, https-only, or redirect-to-https. Default: `redirect-to-https` - `cors_allowed_headers` - List of headers allowed in CORS. Default: `[]`