serverless.yml

service: authenticaton
frameworkVersion: '3'
useDotenv: true

plugins:
  - serverless-offline
  - serverless-plugin-ifelse

custom:
  isOffline: ${env:IS_OFFLINE, "false"}
  serverlessIfElse:
    - If: '"${self:custom.isOffline}" != "true"'
      Exclude:
        - functions.endpoint.handler
        - provider.environment.AWS_ACCESS_KEY_ID
        - provider.environment.AWS_SECRET_ACCESS_KEY
        - provider.environment.CODESPACE_NAME
        - provider.environment.HOME
      ElseExclude:
        - functions.endpoint.image

provider:
  name: aws
  region: eu-central-1

  environment:
    AWS_ACCESS_KEY_ID: ${env:AWS_ACCESS_KEY_ID, ""}
    AWS_SECRET_ACCESS_KEY: ${env:AWS_SECRET_ACCESS_KEY, ""}
    CODESPACE_NAME: ${env:CODESPACE_NAME, ""}
    ENDPOINT_URL_FACEBOOK: ${env:ENDPOINT_URL_FACEBOOK, ""}
    HOME: '/tmp'
    DUCKDB_DATA_PATH: '/var/duckdb'

  iam:
    role:
      statements:
        # Allow functions to list all buckets
        - Effect: Allow
          Action: 's3:ListBucket'
          Resource: '*'
        # Allow functions to read/write objects in a bucket
        - Effect: Allow
          Action:
            - 's3:GetObject'
            #- 's3:PutObject'
          Resource:
            - 'arn:aws:s3:::snekauth/*'

  ecr:
    images:
      appimage:
        path: ./

functions:
  endpoint:
    image:
      name: appimage
      command:
        - dist/app.handler
    handler: dist/app.handler
    events:
      - httpApi:
          path: '*'
          method: '*'
# SPDX-License-Identifier: (EUPL-1.2)
# Copyright © 2019-2022 snek.at