From 0ec5a547f7ce1bd2b29e68c1d5917775fc997093 Mon Sep 17 00:00:00 2001
From: zeeket <emil.heliste@helsinki.fi>
Date: Thu, 6 Jun 2024 22:52:57 +0300
Subject: [PATCH] add googleverification

---
 .github/workflows/destroy-infra.yml | 1 +
 .github/workflows/pr-plan.yml       | 1 +
 .github/workflows/push-apply.yml    | 1 +
 infrastructure/main.tf              | 7 +++++++
 infrastructure/variables.tf         | 6 ++++++
 5 files changed, 16 insertions(+)

diff --git a/.github/workflows/destroy-infra.yml b/.github/workflows/destroy-infra.yml
index 0f0ea4c..1555e1e 100644
--- a/.github/workflows/destroy-infra.yml
+++ b/.github/workflows/destroy-infra.yml
@@ -36,4 +36,5 @@ jobs:
           TF_VAR_FORUM_ROOT_NAME: ${{ secrets.FORUM_ROOT_NAME }}
           TF_VAR_TG_ACTIVE_GROUP_IDS: ${{ secrets.TG_ACTIVE_GROUP_IDS }}
           TF_VAR_TG_ADMIN_GROUP_IDS: ${{ secrets.TG_ADMIN_GROUP_IDS }}
+          TF_VAR_GOOGLEVERIFICATION: ${{ secrets.GOOGLEVERIFICATION }}
           TF_TOKEN_app_terraform_io: ${{ secrets.TF_API_TOKEN }}
\ No newline at end of file
diff --git a/.github/workflows/pr-plan.yml b/.github/workflows/pr-plan.yml
index f4d4a93..e2f28d9 100644
--- a/.github/workflows/pr-plan.yml
+++ b/.github/workflows/pr-plan.yml
@@ -48,6 +48,7 @@ jobs:
         TF_VAR_FORUM_ROOT_NAME: ${{ secrets.FORUM_ROOT_NAME }}
         TF_VAR_TG_ACTIVE_GROUP_IDS: ${{ secrets.TG_ACTIVE_GROUP_IDS }}
         TF_VAR_TG_ADMIN_GROUP_IDS: ${{ secrets.TG_ADMIN_GROUP_IDS }}
+        TF_VAR_GOOGLEVERIFICATION: ${{ secrets.GOOGLEVERIFICATION }}
         TF_TOKEN_app_terraform_io: ${{ secrets.TF_API_TOKEN }}
       id: plan
       run: tofu plan -no-color -input=false -out plan
diff --git a/.github/workflows/push-apply.yml b/.github/workflows/push-apply.yml
index 9667a72..f44062f 100644
--- a/.github/workflows/push-apply.yml
+++ b/.github/workflows/push-apply.yml
@@ -59,5 +59,6 @@ jobs:
             TF_VAR_FORUM_ROOT_NAME: ${{ secrets.FORUM_ROOT_NAME }}
             TF_VAR_TG_ACTIVE_GROUP_IDS: ${{ secrets.TG_ACTIVE_GROUP_IDS }}
             TF_VAR_TG_ADMIN_GROUP_IDS: ${{ secrets.TG_ADMIN_GROUP_IDS }}
+            TF_VAR_GOOGLEVERIFICATION: ${{ secrets.GOOGLEVERIFICATION }}
             TF_TOKEN_app_terraform_io: ${{ secrets.TF_API_TOKEN }}
         run: tofu apply -input=false -auto-approve
\ No newline at end of file
diff --git a/infrastructure/main.tf b/infrastructure/main.tf
index 3dde3f6..f6e9900 100644
--- a/infrastructure/main.tf
+++ b/infrastructure/main.tf
@@ -71,4 +71,11 @@ resource "digitalocean_record" "mx" {
   name     = "@"
   priority = 1
   value    = "SMTP.GOOGLE.COM."
+}
+
+resource "digitalocean_record" "googleverification" {
+  domain = digitalocean_domain.hytky.name
+  type   = "TXT"
+  name   = "@"
+  value  = var.GOOGLEVERIFICATION
 }
\ No newline at end of file
diff --git a/infrastructure/variables.tf b/infrastructure/variables.tf
index 37d6211..ac388a1 100644
--- a/infrastructure/variables.tf
+++ b/infrastructure/variables.tf
@@ -63,4 +63,10 @@ variable "TG_ADMIN_GROUP_IDS" {
   description = "Comma separated Telegram Admin Group IDs"
   type        = string
   sensitive   = true
+}
+
+variable "GOOGLEVERIFICATION" {
+  description = "TXT record for Google Workspace verification"
+  type        = string
+  sensitive = true
 }
\ No newline at end of file