updating cloudfront tls config

thunderbird · Apr 1, 2024 · b486d9c · b486d9c
1 parent 8105bf0
commit b486d9c
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/.github/workflows/primary.yaml b/.github/workflows/primary.yaml
@@ -105,7 +105,7 @@ jobs:
 
   deploy-frontend:
     needs: detect-changes
-    if: github.ref != 'refs/heads/main' && needs.detect-changes.outputs.run-frontend == 'true'
+    if: github.ref == 'refs/heads/main' && needs.detect-changes.outputs.run-frontend == 'true'
     uses: ./.github/workflows/deploy-frontend.yaml
     with:
       aws_region: us-east-1

diff --git a/tofu/modules/services/frontend/main.tf b/tofu/modules/services/frontend/main.tf
@@ -154,7 +154,9 @@ resource "aws_cloudfront_distribution" "appointment" {
 
   viewer_certificate {
     acm_certificate_arn = var.ssl_cert
+    cloudfront_default_certificate = false
     ssl_support_method  = "sni-only"
+    minimum_protocol_version = "TLSv1.2_2021"
   }
 }