feat: init

add public hosted zone and wildcard certificate

main.tf

@@ -1 +1,30 @@
+resource "aws_route53_zone" "this" {
+  name = var.domain
+}
 
+# Certificate
+resource "aws_acm_certificate" "wildcard_cert" {
+  domain_name       = aws_route53_zone.this.name
+  validation_method = "DNS"
+
+  subject_alternative_names = [
+    "*.${aws_route53_zone.this.name}"
+  ]
+}
+
+resource "aws_acm_certificate_validation" "wildcard_cert" {
+  certificate_arn = aws_acm_certificate.wildcard_cert.arn
+  validation_record_fqdns = [
+    aws_route53_record.wildcard_cert_validation.fqdn
+  ]
+}
+
+resource "aws_route53_record" "wildcard_cert_validation" {
+  name    = tolist(aws_acm_certificate.wildcard_cert.domain_validation_options)[0].resource_record_name
+  type    = tolist(aws_acm_certificate.wildcard_cert.domain_validation_options)[0].resource_record_type
+  zone_id = var.should_create_hosted_zone ? aws_route53_zone.hosted_zone.zone_id : aws_route53_zone.this.zone_id
+  records = [
+    tolist(aws_acm_certificate.wildcard_cert.domain_validation_options)[0].resource_record_value
+  ]
+  ttl = "60"
+}