use ovh vm for the cache service

[GrantBirki]

No description provided.

[github-actions]

👋 Thanks for opening a pull request!

If you are new, please check out the deployment process to understand how to deploy this pull request. A trimmed down summary will be listed below:

1. 🧪 Run a noop deployment with .noop as a comment on this PR

2. 👀 Observe the CI and noop output on this pull request to ensure it is passing and doing what it is supposed to do

3. ✔️ Obtain an approval/review on this pull request

4. 🚀 Branch deploy your pull request to production with .deploy

   If anything goes wrong, rollback with .deploy main

5. 🎉 Merge!

[GrantBirki]

.noop

[github-actions]

Deployment Triggered 🚀

GrantBirki, started a noop deployment to production

You can watch the progress here 🔗

noop: ovh-migration

[github-actions]

Deployment Results ✅

GrantBirki successfully noop deployed branch ovh-migration to production

Show Results

Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply":

  # cloudflare_ruleset.cache_rules has changed
  ~ resource "cloudflare_ruleset" "cache_rules" {
        id      = "6510b58fb0ac44c9984077e55eb158d0"
        name    = "default"
        # (3 unchanged attributes hidden)

      + rules {
          + action      = "set_cache_settings"
          + description = "player profiles"
          + enabled     = true
          + expression  = "(http.host eq \"assets.tarkov.dev\" and starts_with(http.request.uri.path, \"/profile/\"))"
          + id          = "d695a1efed064391a038e3bb85958553"

          + action_parameters {
              + automatic_https_rewrites   = false
              + bic                        = false
              + cache                      = true
              + cookie_fields              = []
              + disable_apps               = false
              + disable_railgun            = false
              + disable_zaraz              = false
              + email_obfuscation          = false
              + hotlink_protection         = false
              + increment                  = 0
              + mirage                     = false
              + opportunistic_encryption   = false
              + origin_error_page_passthru = false
              + phases                     = []
              + products                   = []
              + request_fields             = []
              + respect_strong_etags       = false
              + response_fields            = []
              + rocket_loader              = false
              + rules                      = {}
              + rulesets                   = []
              + server_side_excludes       = false
              + status_code                = 0
              + sxg                        = false

              + edge_ttl {
                  + default = 86400
                  + mode    = "override_origin"
                }
            }
        }
        # (6 unchanged blocks hidden)
    }

  # cloudflare_ruleset.security_response_headers has changed
  ~ resource "cloudflare_ruleset" "security_response_headers" {
        id          = "99896b7130154c279bd0dd1d94f109ec"
        name        = "Security Response Headers"
        # (4 unchanged attributes hidden)

      ~ rules {
          ~ expression  = "(not http.host contains \"api\" and not http.host contains \"manager\" and not http.host contains \"status\")" -> "(not http.host contains \"api\" and not http.host contains \"manager\" and not http.host contains \"status\" and not http.host contains \"player\")"
            id          = "f26d12a2a0fc41c58557f094dfa437fc"
            # (3 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
      + rules {
          + action      = "rewrite"
          + description = "Add CORS header to player API"
          + enabled     = true
          + expression  = "(http.host eq \"player.tarkov.dev\")"
          + id          = "ac6a375d53e94563bf21ab95b7664d9a"

          + action_parameters {
              + automatic_https_rewrites   = false
              + bic                        = false
              + cache                      = false
              + cookie_fields              = []
              + disable_apps               = false
              + disable_railgun            = false
              + disable_zaraz              = false
              + email_obfuscation          = false
              + hotlink_protection         = false
              + increment                  = 0
              + mirage                     = false
              + opportunistic_encryption   = false
              + origin_error_page_passthru = false
              + phases                     = []
              + products                   = []
              + request_fields             = []
              + respect_strong_etags       = false
              + response_fields            = []
              + rocket_loader              = false
              + rules                      = {}
              + rulesets                   = []
              + server_side_excludes       = false
              + status_code                = 0
              + sxg                        = false

              + headers {
                  + name      = "Access-Control-Allow-Origin"
                  + operation = "set"
                  + value     = "*"
                }
            }
        }
    }

Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # cloudflare_record.cache will be updated in-place
  ~ resource "cloudflare_record" "cache" {
        id              = "65105596207eb686b256c9bb9cd17e23"
        name            = "cache"
      ~ value           = "20.124.115.39" -> "135.148.148.174"
        # (10 unchanged attributes hidden)
    }

  # cloudflare_ruleset.cache_rules will be updated in-place
  ~ resource "cloudflare_ruleset" "cache_rules" {
        id      = "6510b58fb0ac44c9984077e55eb158d0"
        name    = "default"
        # (3 unchanged attributes hidden)

      - rules {
          - action      = "set_cache_settings" -> null
          - description = "player profiles" -> null
          - enabled     = true -> null
          - expression  = "(http.host eq \"assets.tarkov.dev\" and starts_with(http.request.uri.path, \"/profile/\"))" -> null
          - id          = "d695a1efed064391a038e3bb85958553" -> null

          - action_parameters {
              - automatic_https_rewrites   = false -> null
              - bic                        = false -> null
              - cache                      = true -> null
              - cookie_fields              = [] -> null
              - disable_apps               = false -> null
              - disable_railgun            = false -> null
              - disable_zaraz              = false -> null
              - email_obfuscation          = false -> null
              - hotlink_protection         = false -> null
              - increment                  = 0 -> null
              - mirage                     = false -> null
              - opportunistic_encryption   = false -> null
              - origin_error_page_passthru = false -> null
              - phases                     = [] -> null
              - products                   = [] -> null
              - request_fields             = [] -> null
              - respect_strong_etags       = false -> null
              - response_fields            = [] -> null
              - rocket_loader              = false -> null
              - rules                      = {} -> null
              - rulesets                   = [] -> null
              - server_side_excludes       = false -> null
              - status_code                = 0 -> null
              - sxg                        = false -> null

              - edge_ttl {
                  - default = 86400 -> null
                  - mode    = "override_origin" -> null
                }
            }
        }
        # (6 unchanged blocks hidden)
    }

  # cloudflare_ruleset.security_response_headers will be updated in-place
  ~ resource "cloudflare_ruleset" "security_response_headers" {
        id          = "99896b7130154c279bd0dd1d94f109ec"
        name        = "Security Response Headers"
        # (4 unchanged attributes hidden)

      ~ rules {
          ~ expression  = "(not http.host contains \"api\" and not http.host contains \"manager\" and not http.host contains \"status\" and not http.host contains \"player\")" -> "(not http.host contains \"api\" and not http.host contains \"manager\" and not http.host contains \"status\")"
            id          = "f26d12a2a0fc41c58557f094dfa437fc"
            # (3 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
      - rules {
          - action      = "rewrite" -> null
          - description = "Add CORS header to player API" -> null
          - enabled     = true -> null
          - expression  = "(http.host eq \"player.tarkov.dev\")" -> null
          - id          = "ac6a375d53e94563bf21ab95b7664d9a" -> null

          - action_parameters {
              - automatic_https_rewrites   = false -> null
              - bic                        = false -> null
              - cache                      = false -> null
              - cookie_fields              = [] -> null
              - disable_apps               = false -> null
              - disable_railgun            = false -> null
              - disable_zaraz              = false -> null
              - email_obfuscation          = false -> null
              - hotlink_protection         = false -> null
              - increment                  = 0 -> null
              - mirage                     = false -> null
              - opportunistic_encryption   = false -> null
              - origin_error_page_passthru = false -> null
              - phases                     = [] -> null
              - products                   = [] -> null
              - request_fields             = [] -> null
              - respect_strong_etags       = false -> null
              - response_fields            = [] -> null
              - rocket_loader              = false -> null
              - rules                      = {} -> null
              - rulesets                   = [] -> null
              - server_side_excludes       = false -> null
              - status_code                = 0 -> null
              - sxg                        = false -> null

              - headers {
                  - name      = "Access-Control-Allow-Origin" -> null
                  - operation = "set" -> null
                  - value     = "*" -> null
                }
            }
        }
    }

Plan: 0 to add, 3 to change, 0 to destroy.

[GrantBirki]

Uh oh, looks like some manual changes took place in cloudflare. I will not deploy this out of safety and instead will make these changes manually as well