{"id":14958003,"url":"https://github.com/cruxstack/terraform-aws-yopass","last_synced_at":"2026-01-07T11:07:48.478Z","repository":{"id":180463434,"uuid":"665186331","full_name":"cruxstack/terraform-aws-yopass","owner":"cruxstack","description":"Terraform Module to deploy Yopass on AWS serverless technologies","archived":false,"fork":false,"pushed_at":"2024-06-05T14:54:31.000Z","size":70,"stargazers_count":1,"open_issues_count":2,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-03-20T13:49:02.426Z","etag":null,"topics":["aws-lambda","cloudfront","cloudposse","dynamodb","serverless","sweetops","terraform","terraform-module","yopass"],"latest_commit_sha":null,"homepage":"https://registry.terraform.io/modules/cruxstack/yopass/aws/latest","language":"HCL","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cruxstack.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2023-07-11T16:17:26.000Z","updated_at":"2024-06-05T14:54:20.000Z","dependencies_parsed_at":"2024-09-22T05:00:38.262Z","dependency_job_id":null,"html_url":"https://github.com/cruxstack/terraform-aws-yopass","commit_stats":{"total_commits":41,"total_committers":2,"mean_commits":20.5,"dds":"0.14634146341463417","last_synced_commit":"66086e0782b3f3889ca32c1ee997fd9164822057"},"previous_names":["sgtoj/terraform-aws-yopass","cruxstack/terraform-aws-yopass"],"tags_count":30,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cruxstack%2Fterraform-aws-yopass","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cruxstack%2Fterraform-aws-yopass/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cruxstack%2Fterraform-aws-yopass/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cruxstack%2Fterraform-aws-yopass/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cruxstack","download_url":"https://codeload.github.com/cruxstack/terraform-aws-yopass/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":245749854,"owners_count":20666084,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["aws-lambda","cloudfront","cloudposse","dynamodb","serverless","sweetops","terraform","terraform-module","yopass"],"created_at":"2024-09-24T13:15:57.948Z","updated_at":"2026-01-07T11:07:48.428Z","avatar_url":"https://github.com/cruxstack.png","language":"HCL","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Terraform Module: Yopass (via AWS Serverless)\n\nThis Terraform module deploys a [Yopass](https://github.com/jhaals/yopass)\nserver using a serverless architecture on AWS. It leverages AWS Lambda,\nDynamoDB, and CloudFront to provide a highly available, scalable, and\ncost-effective solution. The design adheres to a pay-per-use model.\n\n## Features\n\n- **Secure Secret Sharing**: Yopass is designed for secure secret sharing, and\n  client-side encryption ensures your secrets remain private.\n- **Serverless Deployment**: Yopass is deployed using AWS Lambda, enabling a\n  highly scalable and maintenance-free setup.\n- **Cost-Effective**: The pay-per-use model of AWS Lambda and DynamoDB ensures\n  you only pay for what you use.\n- **CloudFront Distribution**: The Yopass website is served via a CloudFront\n  distribution for a fast and secure user experience globally.\n- **Automated Deployment**: The entire Yopass deployment, including the server,\n  website, and database, is handled by Terraform, providing an easy and repeatable deployment process.\n- **User Authentication Layer**: An optional user authentication layer is\n  available, securing access to the Yopass website using AWS Cognito.\n\n## Usage\n\n```hcl\nmodule \"yopass\" {\n  source  = \"cruxstack/yopass/aws\"\n  version = \"x.x.x\"\n\n  website_domain_name                = \"yopass.example.com\"\n  website_certificate_arn            = \"arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012\"\n}\n```\n\n## Inputs\n\nIn addition to the variables documented below, this module includes several\nother optional variables (e.g., `name`, `tags`, etc.) provided by the\n`cloudposse/label/null` module. Please refer to its [documentation](https://registry.terraform.io/modules/cloudposse/label/null/latest)\nfor more details on these variables.\n\n| Name                                 | Description                                                                                                   |                 Type                 | Default  | Required |\n|--------------------------------------|---------------------------------------------------------------------------------------------------------------|:------------------------------------:|:--------:|:--------:|\n| `auth_cognito_idp_arn`               | ARN of the Cognito User Pool to use for authentication. Only appliable if `auth_enabled` is `true`.           |                string                |   null   |    No    |\n| `auth_cognito_idp_client_id`         | Client ID of the Cognito User Pool to use for authentication. Only appliable if `auth_enabled` is `true`.     |                string                |   null   |    No    |\n| `auth_cognito_idp_client_scopes`     | Client scopes of the Cognito User Pool to use for authentication. Only appliable if `auth_enabled` is `true`. |             list(string)             |    []    |    No    |\n| `auth_cognito_idp_client_secret`     | Client secret of the Cognito User Pool to use for authentication. Only appliable if `auth_enabled` is `true`. |                string                |   null   |    No    |\n| `auth_cognito_idp_domain`            | Domain of the Cognito User Pool to use for authentication. Only appliable if `auth_enabled` is `true`.        |                string                |   null   |    No    |\n| `auth_cognito_idp_jwks`              | JWKS of the Cognito User Pool to use for authentication. Only appliable if `auth_enabled` is `true`.          | object({ keys = list(map(string)) }) |   null   |    No    |\n| `auth_enabled`                       | Whether to enable authentication power by Cognito User Pool.                                                  |                 bool                 |  false   |    No    |\n| `aws_account_id`                     | The AWS account ID that the module will be deployed.                                                          |                string                |    \"\"    |    No    |\n| `aws_region_name`                    | The AWS region name where the module will be deployed.                                                        |                string                |    \"\"    |    No    |\n| `server_waf_acl_name`                | Name of the WAF ACL to associate with the API Gateway.                                                        |                string                |    \"\"    |    No    |\n| `website_certificate_arn`            | ARN of the ACM certificate for the domain name.                                                               |                string                |   None   |   Yes    |\n| `website_domain_name`                | Domain name for Yopass website.                                                                               |                string                |   None   |   Yes    |\n| `website_waf_acl_name`               | Name of the WAF ACL to associate with the CloudFront distribution.                                            |                string                |    \"\"    |    No    |\n| `yopass_encrypted_secret_max_length` | Maximum length of encrypted secrets.                                                                          |                number                |  10000   |    No    |\n| `yopass_version`                     | Version of Yopass to deploy.                                                                                  |                string                | \"latest\" |    No    |\n\n## Outputs\n\n| Name                                | Description                                                                   |\n|-------------------------------------|-------------------------------------------------------------------------------|\n| `server_apigw_id`                   | The ID of the Yopass server API Gateway.                                      |\n| `server_apigw_url`                  | The URL of the Yopass server API Gateway.                                     |\n| `website_cloudfront_domain_name`    | The domain name of the CloudFront distribution serving the Yopass website.    |\n| `website_cloudfront_hosted_zone_id` | The hosted zone id of the CloudFront distribution serving the Yopass website. |\n\n## Contributing\n\nWe welcome contributions to this project. For information on setting up a\ndevelopment environment and how to make a contribution, see [CONTRIBUTING](./CONTRIBUTING.md)\ndocumentation.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcruxstack%2Fterraform-aws-yopass","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcruxstack%2Fterraform-aws-yopass","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcruxstack%2Fterraform-aws-yopass/lists"}