lockthat.xyz/serverless.yml at master · rohithpr/lockthat.xyz · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
org: praroh2
app: lockthat-backend
service: lockthat-api

provider:
  name: aws
  runtime: python3.8
  stage: prod
  region: us-east-1
  lambdaHashingVersion: 20201221

  environment:
    # Generic
    HOLD_STAGE: "prod"
    HOLD_SENTRY_DSN: ${env:HOLD_SENTRY_DSN}
    HOLD_SLACK_VERIFICATION_TOKEN: ${env:HOLD_SLACK_VERIFICATION_TOKEN}
    HOLD_SLACK_SIGNING_SECRET: ${env:HOLD_SLACK_SIGNING_SECRET}
    HOLD_SLACK_CLIENT_ID: ${env:HOLD_SLACK_CLIENT_ID}
    HOLD_SLACK_CLIENT_SECRET: ${env:HOLD_SLACK_CLIENT_SECRET}
    LOCKTHAT_DOMAIN: "https://app.lockthat.xyz"

  iam:
    role:
      statements:
        - Effect: "Allow"
          Action:
            # TODO: Grant granular access to required actions
            - "dynamodb:*"
          Resource:
            - arn:aws:dynamodb:${self:provider.region}:*:table/lockthat-prod-accounts

resources:
  Resources:
    UsersTable:
      Type: AWS::DynamoDB::Table
      Properties:
        TableName: lockthat-prod-accounts
        AttributeDefinitions:
          - AttributeName: uid
            AttributeType: S
        KeySchema:
          - AttributeName: uid
            KeyType: HASH
        BillingMode: PAY_PER_REQUEST

functions:
  app:
    handler: wsgi_handler.handler
    events:
      - http: ANY /
      - http: 'ANY /{proxy+}'

custom:
  wsgi:
    app: app.app
    pythonBin: python3 # Some systems with Python3 may require this
    packRequirements: false
  pythonRequirements:
    dockerizePip: non-linux
  customDomain:
    domainName: api.lockthat.xyz
    stage: prod
    basePath: api
    certificateName: '*.lockthat.xyz'
    createRoute53Record: true
    endpointType: 'regional'
    securityPolicy: tls_1_2
    apiType: rest
    autoDomain: false

plugins:
  - serverless-wsgi
  - serverless-python-requirements
  - serverless-domain-manager