Terraform中Elastic Beanstalk HTTP到HTTPS的重定向

files:
  "/etc/nginx/conf.d/https_redirect.conf":
    mode: "000644"
    owner: root
    group: root
    content: |
      if ($http_x_forwarded_proto != "https") {
          return 301 https://$host$request_uri;
      }

resource "aws_elastic_beanstalk_environment" "example" {
  name                = "example"
  application         = aws_elastic_beanstalk_application.example.name
  solution_stack_name = "64bit Amazon Linux 2 v5.4.5 running Node.js 12"

  setting {
    namespace = "aws:elasticbeanstalk:container:nodejs"
    name      = "ProxyServer"
    value     = "nginx"
  }

  setting {
    namespace = "aws:elasticbeanstalk:container:nodejs"
    name      = "ProxyServerPort"
    value     = "8081"
  }

  setting {
    namespace = "aws:elasticbeanstalk:container:nodejs"
    name      = "StaticFiles"
    value     = "/public"
  }

  setting {
    namespace = "aws:elasticbeanstalk:environment:process:default"
    name      = "HealthCheckPath"
    value     = "/_health"
  }

  setting {
    namespace = "aws:elasticbeanstalk:environment"
    name      = "EnvironmentType"
    value     = "LoadBalanced"
  }

  setting {
    namespace = "aws:elasticbeanstalk:environment"
    name      = "LoadBalancerType"
    value     = "application"
  }

  setting {
    namespace = "aws:elasticbeanstalk:environment"
    name      = "LoadBalancerAddListenerForwardPort80"
    value     = "true"
  }

  setting {
    namespace = "aws:elasticbeanstalk:environment"
    name      = "LoadBalancerAddListenerForwardPort443"
    value     = "true"
  }

  setting {
    namespace = "aws:elasticbeanstalk:environment"
    name      = "LoadBalancerHTTPPort"
    value     = "80"
  }

  setting {
    namespace = "aws:elasticbeanstalk:environment"
    name      = "LoadBalancerHTTPSPort"
    value     = "443"
  }

  setting {
    namespace = "aws:elasticbeanstalk:environment"
    name      = "LoadBalancerSSLCertificate"
    value     = "<your_ssl_certificate_arn>"
  }

  setting {
    namespace = "aws:elbv2:listener:443"
    name      = "DefaultProcess"
    value     = "redirect-http-to-https"
  }

  setting {
    namespace = "aws:elasticbeanstalk:environment"
    name      = "Process"
    value     = "redirect-http-to-https"
  }

  setting {
    namespace = "aws:elasticbeanstalk:environment:process:redirect-http-to-https"
    name      = "Protocol"
    value     = "redirect"
  }
}