import { Construct } from "constructs"; import * as cdk from "aws-cdk-lib"; import * as cloudfront from "aws-cdk-lib/aws-cloudfront"; import * as path from "node:path"; import * as logs from "aws-cdk-lib/aws-logs"; import * as lambda from "aws-cdk-lib/aws-lambda"; import * as s3 from "aws-cdk-lib/aws-s3"; import * as assets from "aws-cdk-lib/aws-s3-assets"; import * as deployment from "aws-cdk-lib/aws-s3-deployment"; import * as origins from "aws-cdk-lib/aws-cloudfront-origins"; export class NextJsTemplateStack extends cdk.Stack { constructor(scope: Construct, id: string, props?: cdk.StackProps) { super(scope, id, props); const cloudFrontCachePolicy = new cloudfront.CachePolicy( this, "CloudFront Cache Policy", { minTtl: cdk.Duration.seconds(0), maxTtl: cdk.Duration.seconds(31536000), defaultTtl: cdk.Duration.seconds(0), enableAcceptEncodingGzip: true, enableAcceptEncodingBrotli: true, headerBehavior: cloudfront.CacheHeaderBehavior.allowList( "rsc", "next-router-prefetch", "next-router-state-tree", "accept", ), comment: "CloudFront Cache Policy", }, ); const nextCache = new s3.Bucket(this, "NextCache", { removalPolicy: cdk.RemovalPolicy.DESTROY, blockPublicAccess: s3.BlockPublicAccess.BLOCK_ALL, }); const nextCacheAsset = new assets.Asset(this, "nextCacheAsset", { path: path.join(__dirname, "./../../", "./.open-next/cache"), }); const serverFunction = new lambda.Function(this, "Server Function", { runtime: lambda.Runtime.NODEJS_18_X, code: lambda.Code.fromAsset( path.join(__dirname, "./../../", "./.open-next/server-function"), ), handler: "index.handler", timeout: cdk.Duration.seconds(29), memorySize: 1024, logRetention: logs.RetentionDays.ONE_WEEK, environment: { CACHE_BUCKET_NAME: nextCache.bucketName }, }); nextCache.grantReadWrite(serverFunction); const cloudFrontFunction = new cloudfront.Function(this, "Function", { code: cloudfront.FunctionCode.fromInline(`function handler(event) { var request = event.request; request.headers["x-forwarded-host"] = request.headers.host; return request; }`), }); const nextAssets = new s3.Bucket(this, "NextAssets", { removalPolicy: cdk.RemovalPolicy.DESTROY, blockPublicAccess: s3.BlockPublicAccess.BLOCK_ALL, }); const nextAssetsAsset = new assets.Asset(this, "nextAssetsAsset", { path: path.join(__dirname, "./../../", "./.open-next/assets"), }); const imageOptimizationFunction = new lambda.Function( this, "Image Optimization Function", { runtime: lambda.Runtime.NODEJS_18_X, code: lambda.Code.fromAsset( path.join( __dirname, "./../../", "./.open-next/image-optimization-function", ), ), handler: "index.handler", timeout: cdk.Duration.seconds(29), memorySize: 1024, logRetention: logs.RetentionDays.ONE_WEEK, environment: { BUCKET_NAME: nextAssets.bucketName }, }, ); nextAssets.grantRead(imageOptimizationFunction); const serverFunctionOriginUrl = serverFunction.addFunctionUrl({ authType: lambda.FunctionUrlAuthType.NONE, }); const serverFunctionOrigin = new origins.HttpOrigin( cdk.Fn.select(2, cdk.Fn.split("/", serverFunctionOriginUrl.url)), ); const nextAssetsOriginIdentity = new cloudfront.OriginAccessIdentity( this, "NextAssets's OriginAccessIdentity", ); nextAssets.grantRead(nextAssetsOriginIdentity); const nextAssetsOrigin = new origins.S3Origin(nextAssets, { originAccessIdentity: nextAssetsOriginIdentity, }); const imageOptimizationFunctionOriginUrl = imageOptimizationFunction.addFunctionUrl({ authType: lambda.FunctionUrlAuthType.NONE, }); const imageOptimizationFunctionOrigin = new origins.HttpOrigin( cdk.Fn.select( 2, cdk.Fn.split("/", imageOptimizationFunctionOriginUrl.url), ), ); const cloudFront = new cloudfront.Distribution(this, "CloudFront", { defaultBehavior: { origin: serverFunctionOrigin, originRequestPolicy: cloudfront.OriginRequestPolicy.ALL_VIEWER_EXCEPT_HOST_HEADER, viewerProtocolPolicy: cloudfront.ViewerProtocolPolicy.REDIRECT_TO_HTTPS, cachePolicy: cloudFrontCachePolicy, }, additionalBehaviors: { "/_next/data/*": { origin: serverFunctionOrigin, originRequestPolicy: cloudfront.OriginRequestPolicy.ALL_VIEWER_EXCEPT_HOST_HEADER, viewerProtocolPolicy: cloudfront.ViewerProtocolPolicy.REDIRECT_TO_HTTPS, cachePolicy: cloudFrontCachePolicy, functionAssociations: [ { function: cloudFrontFunction, eventType: cloudfront.FunctionEventType.VIEWER_REQUEST, }, ], }, "/favicon.ico": { origin: nextAssetsOrigin, viewerProtocolPolicy: cloudfront.ViewerProtocolPolicy.REDIRECT_TO_HTTPS, }, "/api/*": { origin: serverFunctionOrigin, originRequestPolicy: cloudfront.OriginRequestPolicy.ALL_VIEWER_EXCEPT_HOST_HEADER, viewerProtocolPolicy: cloudfront.ViewerProtocolPolicy.REDIRECT_TO_HTTPS, allowedMethods: cloudfront.AllowedMethods.ALLOW_ALL, cachePolicy: cloudFrontCachePolicy, functionAssociations: [ { function: cloudFrontFunction, eventType: cloudfront.FunctionEventType.VIEWER_REQUEST, }, ], }, "/_next/image/*": { origin: imageOptimizationFunctionOrigin, originRequestPolicy: cloudfront.OriginRequestPolicy.ALL_VIEWER_EXCEPT_HOST_HEADER, viewerProtocolPolicy: cloudfront.ViewerProtocolPolicy.REDIRECT_TO_HTTPS, cachePolicy: cloudFrontCachePolicy, }, "/my-images/*": { origin: nextAssetsOrigin, originRequestPolicy: cloudfront.OriginRequestPolicy.ALL_VIEWER_EXCEPT_HOST_HEADER, viewerProtocolPolicy: cloudfront.ViewerProtocolPolicy.REDIRECT_TO_HTTPS, }, "/_next/static/*": { origin: nextAssetsOrigin, viewerProtocolPolicy: cloudfront.ViewerProtocolPolicy.REDIRECT_TO_HTTPS, }, "/next.svg": { origin: nextAssetsOrigin, originRequestPolicy: cloudfront.OriginRequestPolicy.ALL_VIEWER_EXCEPT_HOST_HEADER, viewerProtocolPolicy: cloudfront.ViewerProtocolPolicy.REDIRECT_TO_HTTPS, }, "/vercel.svg": { origin: nextAssetsOrigin, originRequestPolicy: cloudfront.OriginRequestPolicy.ALL_VIEWER_EXCEPT_HOST_HEADER, viewerProtocolPolicy: cloudfront.ViewerProtocolPolicy.REDIRECT_TO_HTTPS, }, }, }); new deployment.BucketDeployment(this, "nextCacheDeployment", { destinationBucket: nextCache, sources: [ deployment.Source.bucket( nextCacheAsset.bucket, nextCacheAsset.s3ObjectKey, ), ], }); new deployment.BucketDeployment(this, "nextAssetsDeployment", { destinationBucket: nextAssets, sources: [ deployment.Source.bucket( nextAssetsAsset.bucket, nextAssetsAsset.s3ObjectKey, ), ], distribution: cloudFront, }); // Akeero tags cdk.Tags.of(this).add("akeero:project-id", "2SptkyjVoH9XRZuflEwAHkZh0tU"); cdk.Tags.of(cloudFront).add("akeero:id", "2Sptqxr8BvYLCiF3KDmJTumI0Vh"); cdk.Tags.of(serverFunction).add("akeero:id", "2SptrS30rMl3eCVu2zJTBBAqFIM"); cdk.Tags.of(imageOptimizationFunction).add( "akeero:id", "2SptrhIidonfcRdo9aZMDgRIQm4", ); cdk.Tags.of(nextCache).add("akeero:id", "2Spts0QSixwEU4SIJ5upviQ1s0M"); cdk.Tags.of(nextAssets).add("akeero:id", "2SptsSot2QuwWu9qobR9OIRokGT"); cdk.Tags.of(cloudFrontCachePolicy).add( "akeero:id", "2Sptu7pL2lgyNZIsCSZQpNgssy8", ); cdk.Tags.of(cloudFrontFunction).add( "akeero:id", "2SptuT5hCPC0CBsffYw5a1Xkolv", ); new cdk.CfnOutput(this, "AkeeroProjectId", { value: "2SptkyjVoH9XRZuflEwAHkZh0tU", }); new cdk.CfnOutput(this, "ServerFunctionFunctionArn", { value: serverFunction.functionArn, }); new cdk.CfnOutput(this, "ImageOptimizationFunctionFunctionArn", { value: imageOptimizationFunction.functionArn, }); new cdk.CfnOutput(this, "CloudFrontDomainName", { value: cloudFront.domainName, }); } }