yaleman / thin-controller / 18210239380

66%

push

github

Containerisation and Fargate deployment (#214)

Added CLAUDE.md to provide guidance for Claude Code with:
- Project architecture and structure
- Development commands (uv, just, pytest, mypy, ruff)
- AWS Lambda deployment details
- Instance state management rules

Also added GitHub Actions workflow for container builds and updated Terraform configuration with lambda/fargate deployment options.
* Add Fargate deployment with CloudFront, and WAF geo-blocking

Added complete Fargate infrastructure:
- ECS Fargate cluster with task definition for container deployment
- WAF with geo-blocking for sanctioned countries (SY, SD, RU, KP, IR, CU)
- Security groups for ECS tasks
- IAM roles for task execution and EC2 instance management
- Added support for IP allow lists and managed prefix lists
- Added us-east-1 provider for CloudFront WAF
- Updated Lambda module to v1.0.9
- Updated Dockerfile to bind to 0.0.0.0
- Added host/port CLI options to thin-controller

Infrastructure changes:
- Added ALB security group with IP/prefix list restrictions
- Updated CloudFront origin to point to ALB
- ALB uses HTTP health checks on path /

Tagging improvements:
- Added global tags variable (map of key-value pairs)
- Created tags.tf with common_tags local merging defaults with custom tags
- Default tags: ManagedBy=Tofu, Project=thin-controller
- Applied merged tags to all resources:
  - ECS Cluster, Security Groups, ALB, Target Group
  - CloudFront Distribution, WAF WebACL
  - CloudWatch Log Group

Application updates:
- Added /up health check endpoint returning "OK"
- Updated tests for new endpoint

6 of 7 new or added lines in 2 files covered. (85.71%)

88 of 134 relevant lines covered (65.67%)

0.66 hits per line