Deploy bors-prod account

This adds the DNS name configuration and configures deployment via GHA
to the production account.

Author: Mark-Simulacrum

terragrunt/accounts/bors-prod/app/.terraform.lock.hcl

@@ -0,0 +1,12 @@
+terraform {
+  source = "../../../modules//bors"
+}
+
+include {
+  path           = find_in_parent_folders()
+  merge_strategy = "deep"
+}
+
+inputs = {
+  domain = "bors-prod.rust-lang.net"
+}

terragrunt/accounts/bors-prod/app/terragrunt.hcl

@@ -6,3 +6,7 @@ include {
   path           = find_in_parent_folders()
   merge_strategy = "deep"
 }
+
+inputs = {
+  domain = "bors-staging.rust-lang.net"
+}

terragrunt/accounts/bors-staging/app/terragrunt.hcl

@@ -377,7 +377,7 @@ resource "aws_lb_listener" "primary" {
 }
 
 resource "aws_acm_certificate" "primary" {
-  domain_name       = "bors-staging.rust-lang.net"
+  domain_name       = var.domain
   validation_method = "DNS"
 
   lifecycle {
@@ -386,7 +386,7 @@ resource "aws_acm_certificate" "primary" {
 }
 
 data "aws_route53_zone" "net" {
-  name         = "bors-staging.rust-lang.net"
+  name         = var.domain
   private_zone = false
 }
 
@@ -414,7 +414,7 @@ resource "aws_acm_certificate_validation" "primary" {
 
 resource "aws_route53_record" "lb" {
   zone_id = data.aws_route53_zone.net.zone_id
-  name    = "bors-staging.rust-lang.net"
+  name    = var.domain
   type    = "A"
 
   alias {
@@ -490,3 +490,7 @@ resource "aws_vpc_security_group_egress_rule" "rds_egress_anywhere_v6" {
   ip_protocol = -1
   to_port     = -1
 }
+
+variable "domain" {
+  description = "domain to use"
+}