Add OpenTofu docs, switch to OpenTofu in workflow

Author: suhailskhan

.github/workflows/release-build-and-deploy.yml

@@ -129,12 +129,8 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v4
 
-      - name: Set up Terraform
-        uses: hashicorp/setup-terraform@v3
-
-      # TODO: Replace above step with this
-      # - name: Set up OpenTofu
-      #   uses: hashicorp/setup-opentofu@v1
+      - name: Set up OpenTofu
+        uses: hashicorp/setup-opentofu@v1
 
       - name: Configure AWS credentials
         uses: aws-actions/configure-aws-credentials@v4
@@ -143,36 +139,26 @@ jobs:
           aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
           aws-region: ${{ needs.set-deployment-variables.outputs.aws_region }}
 
-      - name: Initialize Terraform
+      - name: Initialize Tofu
         run: |
-          cd terraform
-          terraform init
+          tofu -chdir=infra init
 
-      - name: Terraform Plan
+      - name: Tofu Plan
         run: |
-          cd terraform
-          terraform plan \
+          tofu -chdir=infra plan \
             -var="aws_region=${{ needs.set-deployment-variables.outputs.aws_region }}" \
             -var="environment=dev" \
             -var="cloudflare_api_token=${{ secrets.CLOUDFLARE_API_TOKEN }}" \
             -var="cloudflare_zone_id=${{ secrets.CLOUDFLARE_ZONE_ID }}" \
             -var="domain_name=${{ needs.set-deployment-variables.outputs.domain_name }}" \
             -var="subdomain=${{ needs.set-deployment-variables.outputs.subdomain }}"
 
-      - name: Terraform Apply
+      - name: Tofu Apply
         run: |
-          cd terraform
-          terraform apply -auto-approve \
+          tofu -chdir=infra apply -auto-approve \
             -var="aws_region=${{ needs.set-deployment-variables.outputs.aws_region }}" \
             -var="environment=dev" \
             -var="cloudflare_api_token=${{ secrets.CLOUDFLARE_API_TOKEN }}" \
             -var="cloudflare_zone_id=${{ secrets.CLOUDFLARE_ZONE_ID }}" \
             -var="domain_name=${{ needs.set-deployment-variables.outputs.domain_name }}" \
             -var="subdomain=${{ needs.set-deployment-variables.outputs.subdomain }}"
-
-      # TODO: Replace above three steps with these
-      # - name: Initialize Tofu
-
-      # - name: Tofu Plan
-
-      # - name: Tofu Apply

terraform/.gitignore infra/.gitignoreterraform/.gitignore renamed to infra/.gitignore

@@ -1,6 +1,6 @@
-# AI Usage Log - Terraform Configuration
+# AI Usage Log - OpenTofu/Terraform Configuration
 
-This directory contains Terraform configurations for deploying the AI Usage Log application on AWS Fargate.
+This directory contains OpenTofu/Terraform configurations for deploying the AI Usage Log application on AWS Fargate.
 
 ## Architecture
 
@@ -74,27 +74,29 @@ This setup uses a hybrid DNS approach combining Amazon Route 53 and Cloudflare:
 ### Understanding the DNS Flow
 
 1. **Cloudflare** manages your root domain (e.g., `suhailskhan.com`)
-2. **Terraform** creates a Route 53 hosted zone for your subdomain (e.g., `ai-usage-log.suhailskhan.com`)
-3. **Terraform** automatically creates NS records in Cloudflare pointing the subdomain to AWS nameservers
+2. **OpenTofu/Terraform** creates a Route 53 hosted zone for your subdomain (e.g., `ai-usage-log.suhailskhan.com`)
+3. **OpenTofu/Terraform** automatically creates NS records in Cloudflare pointing the subdomain to AWS nameservers
 4. **Route 53** takes full control of DNS for the subdomain and integrates with the ALB
 5. **ACM** validates the SSL certificate using DNS validation in Route 53
 6. **Traffic flows directly** from users → Route 53 → ALB
 
 ## Deployment Steps
 
-1. Initialize Terraform:
+The following steps use OpenTofu, but you may substitute the commands with Terraform commands.
+
+1. Initialize OpenTofu:
    ```
-   terraform init
+   tofu init
    ```
 
 2. Review the plan:
    ```
-   terraform plan
+   tofu plan
    ```
 
 3. Apply the configuration:
    ```
-   terraform apply
+   tofu apply
    ```
 
 4. Store environment variables in AWS Secrets Manager:
@@ -144,5 +146,5 @@ curl -I https://ai-usage-log.suhailskhan.com
 
 To destroy all created resources:
 ```
-terraform destroy
+tofu destroy
 ```

terraform/.terraform.lock.hcl infra/.terraform.lock.hclterraform/.terraform.lock.hcl renamed to infra/.terraform.lock.hcl

@@ -717,29 +717,25 @@ resource "cloudflare_record" "ai_usage_log_ns_1" {
   name    = var.subdomain
   content = aws_route53_zone.ai_usage_log.name_servers[0]
   type    = "NS"
-  ttl     = 300
 }
 
 resource "cloudflare_record" "ai_usage_log_ns_2" {
   zone_id = var.cloudflare_zone_id
   name    = var.subdomain
   content = aws_route53_zone.ai_usage_log.name_servers[1]
   type    = "NS"
-  ttl     = 300
 }
 
 resource "cloudflare_record" "ai_usage_log_ns_3" {
   zone_id = var.cloudflare_zone_id
   name    = var.subdomain
   content = aws_route53_zone.ai_usage_log.name_servers[2]
   type    = "NS"
-  ttl     = 300
 }
 
 resource "cloudflare_record" "ai_usage_log_ns_4" {
   zone_id = var.cloudflare_zone_id
   name    = var.subdomain
   content = aws_route53_zone.ai_usage_log.name_servers[3]
   type    = "NS"
-  ttl     = 300
 }

terraform/README.md infra/README.mdterraform/README.md renamed to infra/README.md

@@ -5,7 +5,7 @@ subdomain   = "ai-usage-log"
 
 # Cloudflare Configuration
 # Get your API token from: https://dash.cloudflare.com/profile/api-tokens
-# The token needs Zone:Edit permissions for suhailskhan.com
+# The token needs Zone:Edit permissions for your domain
 cloudflare_api_token = "your-cloudflare-api-token-here"
 
 # Get your zone ID from the Cloudflare Dashboard

terraform/main.tf infra/main.tfterraform/main.tf renamed to infra/main.tf

@@ -0,0 +1,13 @@
+aws_region  = "us-east-1"
+environment = "dev"
+domain_name = "suhailskhan.com"
+subdomain   = "ai-usage-log"
+
+# Cloudflare Configuration
+# Get your API token from: https://dash.cloudflare.com/profile/api-tokens
+# The token needs Zone:Edit permissions for your domain
+cloudflare_api_token = "your-cloudflare-api-token-here"
+
+# Get your zone ID from the Cloudflare Dashboard
+# Found in the domain overview page, right sidebar
+cloudflare_zone_id = "your-cloudflare-zone-id-here"