feat: add immich.ca domain to cloudflare (#1678)

Author: zackpollard

tf/deployment/modules/shared/cloudflare/account/dns-immich-ca.tf

@@ -0,0 +1,17 @@
+resource "cloudflare_record" "immich_ca_aaaa_root" {
+  name    = "immich.ca"
+  proxied = true
+  ttl     = 1
+  type    = "AAAA"
+  content = "100::"
+  zone_id = cloudflare_zone.immich_ca.id
+}
+
+resource "cloudflare_record" "immich_ca_aaaa_www" {
+  name    = "www"
+  proxied = true
+  ttl     = 1
+  type    = "AAAA"
+  content = "100::"
+  zone_id = cloudflare_zone.immich_ca.id
+}

tf/deployment/modules/shared/cloudflare/account/redirects.tf

@@ -173,3 +173,27 @@ resource "cloudflare_ruleset" "immich_cc_redirects" {
     enabled     = true
   }
 }
+
+resource "cloudflare_ruleset" "immich_ca_redirects" {
+  zone_id     = cloudflare_zone.immich_ca.id
+  name        = "immich.ca to immich.app redirects"
+  description = "Redirects immich.ca to immich.app"
+  kind        = "zone"
+  phase       = "http_request_dynamic_redirect"
+
+  rules {
+    action = "redirect"
+    action_parameters {
+      from_value {
+        status_code = 307
+        target_url {
+          value = "https://immich.app"
+        }
+        preserve_query_string = true
+      }
+    }
+    expression  = "(http.host eq \"www.immich.ca\") or (http.host eq \"immich.ca\")"
+    description = "Redirect visitors going to immich.ca links"
+    enabled     = true
+  }
+}

tf/deployment/modules/shared/cloudflare/account/zones.tf

@@ -157,6 +157,38 @@ output "immich_pro_zone_id" {
   value = cloudflare_zone.immich_pro.id
 }
 
+resource "cloudflare_zone" "immich_ca" {
+  account_id = var.cloudflare_account_id
+  zone       = "immich.ca"
+}
+
+resource "cloudflare_zone_settings_override" "immich_ca" {
+  zone_id = cloudflare_zone.immich_ca.id
+
+  settings {
+    http3            = "on"
+    zero_rtt         = "on"
+    tls_1_3          = "zrt"
+    always_use_https = "on"
+    ssl              = "strict"
+    brotli           = "on"
+    fonts            = "on"
+    early_hints      = "on"
+    rocket_loader    = "on"
+    speed_brain      = "on"
+  }
+}
+
+resource "cloudflare_tiered_cache" "immich_ca" {
+  zone_id    = cloudflare_zone.immich_ca.id
+  cache_type = "smart"
+}
+
+
+output "immich_ca_zone_id" {
+  value = cloudflare_zone.immich_ca.id
+}
+
 resource "cloudflare_zone" "immich_build" {
   account_id = var.cloudflare_account_id
   zone       = "immich.build"