infra.yaml

name: ${PROJECT_NAME}

dynamodb:
  ${PROJECT_NAME}:
    key:
      - id:s:hash

s3:
  ${PROJECT_BUCKET}:
    attr:
      - cors=true
      - acl=private
      - ttldays=14

lambda:
  ${PROJECT_NAME}:
    entrypoint: backend/backend.go
    attr:
      - concurrency=0
      - memory=128
      - timeout=900
      - logs-ttl-days=7
    trigger:
      - type: api
        attr:
          - dns=${PROJECT_DOMAIN}
      - type: websocket
        attr:
          - dns=${PROJECT_DOMAIN_WEBSOCKET}
    policy:
      - AWSLambdaBasicExecutionRole
    allow:
      - dynamodb:* arn:aws:dynamodb:${AWS_DEFAULT_REGION}:*:table/${PROJECT_NAME}
      - s3:* arn:aws:s3:::${PROJECT_BUCKET}
      - s3:* arn:aws:s3:::${PROJECT_BUCKET}/*
      - execute-api:ManageConnections arn:aws:execute-api:${AWS_DEFAULT_REGION}:*:${WEBSOCKET_ID}/*/*/*
      - lambda:InvokeFunction arn:aws:lambda:*:*:function:${PROJECT_NAME}
    include:
      - frontend/public/index.html.gz
      - frontend/public/favicon.png
    env:
      - PROJECT_NAME=${PROJECT_NAME}
      - PROJECT_DOMAIN=${PROJECT_DOMAIN}
      - PROJECT_DOMAIN_WEBSOCKET=${PROJECT_DOMAIN_WEBSOCKET}
      - PROJECT_URL=${PROJECT_URL}
      - PROJECT_BUCKET=${PROJECT_BUCKET}

## vpc, instance profile, and keypair are only needed for: bin/relay.sh
vpc:
  relay:
    security-group:
      relay:
        rule:
          - tcp:22:0.0.0.0/0
instance-profile:
  relay:
    allow:
      - lambda:UpdateFunctionCode *
keypair:
  relay:
    pubkey-content: ${PUBKEY_CONTENT}