feat: cloudflare pages project tf module

tf/shared/modules/cloudflare-pages-project/config.tf

@@ -0,0 +1,10 @@
+terraform {
+  required_version = "~> 1.7"
+
+  required_providers {
+    cloudflare = {
+      source = "cloudflare/cloudflare"
+      version = "~>4.46"
+    }
+  }
+}

tf/shared/modules/cloudflare-pages-project/locals.tf

@@ -0,0 +1,5 @@
+locals {
+  app_name = replace(var.app_name, "/[^a-zA-Z\\d]/", "-")
+  dashed_domain = replace(var.domain, "/[^a-zA-Z\\d]/", "-")
+  sanitised_project_name = "${local.app_name}-${local.dashed_domain}-${var.env}"
+}

tf/shared/modules/cloudflare-pages-project/outputs.tf

@@ -0,0 +1,7 @@
+output "pages_project" {
+  value = {
+    id        = cloudflare_pages_project.project.id
+    name      = cloudflare_pages_project.project.name
+    subdomain = cloudflare_pages_project.project.subdomain
+  }
+}

tf/shared/modules/cloudflare-pages-project/project.tf

@@ -0,0 +1,33 @@
+resource "cloudflare_pages_project" "project" {
+  account_id        = var.cloudflare_account_id
+  name              = local.sanitised_project_name
+  production_branch = "prod"
+
+  build_config {
+    web_analytics_tag = cloudflare_web_analytics_site.analytics.site_tag
+    web_analytics_token = cloudflare_web_analytics_site.analytics.site_token
+  }
+
+  lifecycle {
+    ignore_changes = [
+      build_config["build_caching"],
+    ]
+  }
+}
+
+data "cloudflare_zone" "zone" {
+  name = var.domain
+}
+
+module "domain" {
+  source = "../domain"
+
+  app_name = var.app_name
+  env = var.env
+}
+
+resource "cloudflare_web_analytics_site" "analytics" {
+  account_id = var.cloudflare_account_id
+  host = module.domain.fqdn
+  auto_install = false
+}

tf/shared/modules/cloudflare-pages-project/providers.tf

@@ -0,0 +1,3 @@
+provider "cloudflare" {
+  api_token = var.cloudflare_api_token
+}

tf/shared/modules/cloudflare-pages-project/variables.tf

@@ -0,0 +1,8 @@
+variable "cloudflare_api_token" {}
+variable "cloudflare_account_id" {}
+
+variable "env" {}
+variable "app_name" {}
+variable "domain" {
+  default = "immich.app"
+}