resource "fastly_service_vcl" "peps" {
  name     = "peps.python.org"
  activate = true
  domain { name = "peps.python.org" }

  backend {
    name          = "GitHub Pages"
    address       = "python.github.io"
    port          = 443
    override_host = "peps.python.org"

    use_ssl           = true
    ssl_check_cert    = true
    ssl_cert_hostname = "python.github.io"
    ssl_sni_hostname  = "python.github.io"
  }

  header {
    name          = "HSTS"
    type          = "response"
    action        = "set"
    destination   = "http.Strict-Transport-Security"
    ignore_if_set = false
    source        = "\"max-age=31536000; includeSubDomains; preload\""
  }

  request_setting {
    name      = "Force TLS"
    force_ssl = true
  }

  snippet {
    name    = "serve-rss"
    type    = "recv"
    content = <<-EOT
        if (req.url == "/peps.rss/") {
          set req.url = "/peps.rss";
        }
    EOT
  }

  snippet {
    name    = "redirect"
    type    = "error"
    content = <<-EOT
        if (obj.status == 618) {
          set obj.status = 302;
          set obj.http.Location = "https://" + req.http.host + req.http.Location;
          return(deliver);
        }
    EOT
  }
  snippet {
    name    = "redirect-numbers"
    type    = "recv"
    content = <<-EOT
        if (req.url ~ "^/(\d|\d\d|\d\d\d|\d\d\d\d)/?$") {
          set req.http.Location = "/pep-" + std.strpad(re.group.1, 4, "0") + "/";
          error 618;
        }
    EOT
  }
  snippet {
    name    = "left-pad-pep-numbers"
    type    = "recv"
    content = <<-EOT
        if (req.url ~ "^/pep-(\d|\d\d|\d\d\d)/?$") {
          set req.http.Location = "/pep-" + std.strpad(re.group.1, 4, "0") + "/";
          error 618;
        }
    EOT
  }
}