Migrate tldredirect

modules/tld-redirect/provider.tf

@@ -0,0 +1,7 @@
+terraform {
+  required_providers {
+    fastly = {
+      source  = "fastly/fastly"
+    }
+  }
+}

modules/tld-redirect/service.tf

@@ -0,0 +1,14 @@
+resource "fastly_service_vcl" "service" {
+  name    = "Production TLD Redirect"
+  comment = ""
+
+  domain {
+    name = "gov.uk"
+  }
+
+  vcl {
+    main    = true
+    name    = "main"
+    content = file("${path.module}/tldredirect.vcl")
+  }
+}

modules/tld-redirect/tldredirect.vcl

@@ -0,0 +1,58 @@
+backend dummy {
+  .host = "127.0.0.1";
+  .port = "1";
+  .probe = {
+    .request = "invalid";
+    .initial = 0;
+    .interval = 365d;
+  }
+}
+
+sub vcl_recv {
+
+  # Force SSL.
+  if (!req.http.Fastly-SSL) {
+    error 801 "Force SSL";
+  } else {
+    error 802 "Redirect GOV.UK";
+  }
+
+  return(error);
+}
+
+sub vcl_fetch {
+}
+
+sub vcl_hit {
+}
+
+sub vcl_miss {
+}
+
+sub vcl_deliver {
+}
+
+sub vcl_error {
+  if (obj.status == 801) {
+    set obj.status = 301;
+    set obj.response = "Moved Permanently";
+    set obj.http.Location = "https://" req.http.host req.url;
+    set obj.http.Fastly-Backend-Name = "force_ssl";
+  }
+
+  if (obj.status == 802) {
+    set obj.status = 301;
+    set obj.response = "Moved Permanently";
+    set obj.http.Location = "https://www.gov.uk" req.url;
+    set obj.http.Strict-Transport-Security = "max-age=63072000; preload";
+  }
+
+  synthetic {""};
+  return (deliver);
+}
+
+sub vcl_pass {
+}
+
+sub vcl_hash {
+}

tld_redirect.tf

@@ -0,0 +1,3 @@
+module "tldredirect-production" {
+  source = "./modules/tld-redirect"
+}