useCustomDomains

setContainerAppsDnsSuffix

true

if (!stackConfig.useCustomDomains && stackConfig.setContainerAppsDnsSuffix) {
    throw new Error(
        "Cannot set the DNS suffix cannot for the Container App Environment without also setting useCustomDomains."
    );
}

if (stackConfig.setContainerAppsDnsSuffix) {
    if (!stackConfig.containerAppsCertificate) {
        throw new Error(
            "containerAppsCertificate stack config is required when using custom domains"
        );
    }

    customDomainConfiguration = {
        dnsSuffix: hostedZoneName,
        certificateValue: stackConfig.containerAppsCertificate.apply((c) =>
            Buffer.from(c, "utf-8").toString("base64")
        ),
        certificatePassword: stackConfig.containerAppsCertificatePassword,
    };
}

// The external container apps environment is publicly accessible
// from the internet.
export const externalContainerAppsEnvironment =
    new containerApps.v20221001.ManagedEnvironment("externalContainerAppsEnv", {
        resourceGroupName: resourceGroup.name,
        appLogsConfiguration: {
            destination: "log-analytics",
            logAnalyticsConfiguration: {
                customerId: logAnalyticsWorkspace.customerId,
                sharedKey: logAnalyticsWorkspaceSharedKeys.apply(
                    (k) => k.primarySharedKey!
                ),
            },
        },
        vnetConfiguration: {
            infrastructureSubnetId: containerAppsInfraSubnet.id,
            internal: false,
        },
        customDomainConfiguration,
        tags: getDefaultTags(),
    });

if (stackConfig.useCustomDomains) {
    if (!hostedZoneId) {
        throw new Error("hostedZoneId is required");
    }

    // Add the verification and the CNAME records to the Cloudflare zone.
    const txtVerificationRecord = new cloudflare.Record(
        "txtVerificationRecord",
        {
            name: `asuid.${hostedZoneName}`,
            type: "TXT",
            zoneId: hostedZoneId,
            value: externalContainerAppsEnvironment.customDomainConfiguration.apply(
                (v) => v!.customDomainVerificationId!
            ),
            // 1 is a special value here meaning "automatic".
            ttl: 1,
        }
    );
}