serverless.yml

service: awesome-g0v-projects

frameworkVersion: '>=1.0.0 <2.0.0'

provider:
  name: aws
  runtime: nodejs16.x
  stage: ${opt:stage, 'dev'}
  region: ${opt:region, 'us-east-1'}
  profile: ${opt:profile}
  product: awesome-g0v-projects
  environment:
    SECRET_NAME: ${self:provider.product}/${self:provider.stage}/secret
    
    S3_BUCKET_DATA: ${self:provider.product}-${self:provider.stage}-data
    S3_BUCKET_WEB: ${self:provider.product}-${self:provider.stage}-website

    CSV_URL_ORGS: https://raw.githubusercontent.com/chunyenHuang/awesome-g0v-projects/master/data/organizations.csv
    CSV_URL: https://raw.githubusercontent.com/chunyenHuang/awesome-g0v-projects/master/data

package:
  individually: true

plugins:
  - serverless-webpack
  - serverless-s3-sync
  - serverless-iam-roles-per-function
  - serverless-pseudo-parameters

functions:
  process:
    handler: functions/process/index.handler
    timeout: 300
    events:
      - schedule:
          rate: rate(12 hours)
    iamRoleStatementsName: ${self:provider.product}-process
    iamRoleStatements:
      - Effect: Allow
        Action: s3:*
        Resource: arn:aws:s3:::${self:provider.environment.S3_BUCKET_DATA}/*
      - Effect: Allow
        Action: secretsmanager:*
        Resource: arn:aws:secretsmanager:${self:provider.region}:#{AWS::AccountId}:secret:${self:provider.environment.SECRET_NAME}-*

resources:
  Resources:
    DataBucket:
      Type: AWS::S3::Bucket
      Properties:
        BucketName: ${self:provider.environment.S3_BUCKET_DATA}
        AccessControl: PublicRead
        CorsConfiguration: 
          CorsRules:
            - AllowedHeaders: ['*']
              AllowedMethods: [GET]
              AllowedOrigins: ['*']
    WebBucket:
      Type: AWS::S3::Bucket
      Properties:
        BucketName: ${self:provider.environment.S3_BUCKET_WEB}
        AccessControl: PublicRead
        WebsiteConfiguration:
          IndexDocument: index.html
          ErrorDocument: index.html

custom:
  s3Sync:
    - bucketName: ${self:provider.environment.S3_BUCKET_WEB}
      localDir: web/build 
      acl: public-read
      defaultContentType: text/html 
      params: 
        - index.html:
            CacheControl: 'no-cache'
        - "*.js":
            CacheControl: 'public, max-age=31536000' 
  webpack:
    includeModules: true