immich-app/devtools
1
0
Fork 0
mirror of https://github.com/immich-app/devtools.git synced 2026-09-30 21:27:48 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: normalize customer auth cname target from secret (#1770)

Browse Source
This commit is contained in:
Zack Pollard
2026-07-01 22:37:03 +01:00
committed by GitHub
parent 49416b5ff0
commit f5d959b023
1 changed files with 10 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tf/deployment/modules/scoped/zitadel/customer/dns.tf
+10 -5
View File
@@ -13,17 +13,22 @@ data "cloudflare_zone" "futo_cloud" {
}
}
# Prod only: auth.futo.cloud -> the prod instance URL, which is exactly what
# CUSTOMER_ZITADEL_DOMAIN holds (the provider connects to it). dev/staging use
# the generated <name>.zitadel.cloud URL directly with no custom domain.
# DNS-only so ZITADEL terminates TLS for the custom domain.
locals {
# CUSTOMER_ZITADEL_DOMAIN is stored as a URL (https://host/); Cloudflare needs
# a bare hostname as CNAME content.
customer_zitadel_host = trimsuffix(trimprefix(data.onepassword_item.customer_zitadel_domain.password, "https://"), "/")
}
# Prod only: auth.futo.cloud -> the prod ZITADEL Cloud instance host from
# CUSTOMER_ZITADEL_DOMAIN. dev/staging use the generated <name>.zitadel.cloud URL
# directly with no custom domain. DNS-only so ZITADEL terminates TLS.
resource "cloudflare_dns_record" "customer_auth" {
count = var.env == "prod" ? 1 : 0
zone_id = data.cloudflare_zone.futo_cloud.id
name = "auth.futo.cloud"
type = "CNAME"
content = data.onepassword_item.customer_zitadel_domain.password
content = local.customer_zitadel_host
ttl = 1
proxied = false
}