Add foundryvtt service

modules/infrastructure/scaleway.tf

@@ -65,6 +65,18 @@ resource "scaleway_object_bucket_policy" "service_bucket_policies" {
           "${scaleway_object_bucket.service_buckets[each.key].name}/*",
         ]
       },
+      {
+        Sid = "Public statement"
+        Effect = "Allow"
+        Action = try(var.services[each.value].s3_public, false) ? "s3:GetObject" : "s3:GetBucketLocation"
+        Principal = {
+          SCW = "*"
+        }
+        Resource = [
+          "${scaleway_object_bucket.service_buckets[each.key].name}",
+          "${scaleway_object_bucket.service_buckets[each.key].name}/*",
+        ]
+      },
     ]
   })
 }

modules/infrastructure/variables.tf

@@ -37,6 +37,7 @@ variable "services" {
     auth_redirects = optional(list(string))
     s3 = optional(string)
     s3_buckets = optional(list(string))
+    s3_public = bool
     database = bool
     storage_box = optional(bool, false)
   }))