terraform {
  backend "s3" {
    bucket = "terraform.grimoire"
    key    = "bliki.tfstate"
    region = "ca-central-1"
  }
}

provider "aws" {
  region = "ca-central-1"
}

# CloudFront needs certificates in us-east-1.
provider "aws" {
  alias  = "cloudfront"
  region = "us-east-1"
}

resource "aws_s3_bucket" "bliki" {
  bucket = "grimoire.ca"

  tags = {
    Project = "bliki"
  }
}

resource "aws_s3_bucket_website_configuration" "bliki" {
  bucket = aws_s3_bucket.bliki.id

  index_document {
    suffix = "index.html"
  }
}

resource "aws_s3_bucket_policy" "bliki" {
  bucket = aws_s3_bucket.bliki.id
  policy = <<POLICY
{
  "Version":"2012-10-17",
  "Statement":[
    {
      "Effect":"Allow",
      "Principal": "*",
      "Action": ["s3:GetObject"],
      "Resource": ["${aws_s3_bucket.bliki.arn}/*"]
    }
  ]
}
POLICY

}

data "aws_route53_zone" "grimoire_ca" {
  name = "grimoire.ca"
}