diff --git a/.gitignore b/.gitignore
index 5adbbb6..c6900f9 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,5 +1,6 @@
 *.log
 .env
+.terraform
 debs
 node_modules
 work
diff --git a/tf/.terraform.lock.hcl b/tf/.terraform.lock.hcl
new file mode 100755
index 0000000..d1da1f0
--- /dev/null
+++ b/tf/.terraform.lock.hcl
@@ -0,0 +1,22 @@
+# This file is maintained automatically by "terraform init".
+# Manual edits may be lost in future updates.
+
+provider "registry.terraform.io/hashicorp/aws" {
+  version     = "2.70.0"
+  constraints = "~> 2.70"
+  hashes = [
+    "h1:6tf4jg37RrMHyVCql+fEgAFvX8JiqDognr+lk6rx7To=",
+    "zh:01a5f351146434b418f9ff8d8cc956ddc801110f1cc8b139e01be2ff8c544605",
+    "zh:1ec08abbaf09e3e0547511d48f77a1e2c89face2d55886b23f643011c76cb247",
+    "zh:606d134fef7c1357c9d155aadbee6826bc22bc0115b6291d483bc1444291c3e1",
+    "zh:67e31a71a5ecbbc96a1a6708c9cc300bbfe921c322320cdbb95b9002026387e1",
+    "zh:75aa59ae6f0834ed7142c81569182a658e4c22724a34db5d10f7545857d8db0c",
+    "zh:76880f29fca7a0a3ff1caef31d245af2fb12a40709d67262e099bc22d039a51d",
+    "zh:aaeaf97ffc1f76714e68bc0242c7407484c783d604584c04ad0b267b6812b6dc",
+    "zh:ae1f88d19cc85b2e9b6ef71994134d55ef7830fd02f1f3c58c0b3f2b90e8b337",
+    "zh:b155bdda487461e7b3d6e3a8d5ce5c887a047e4d983512e81e2c8266009f2a1f",
+    "zh:ba394a7c391a26c4a91da63ad680e83bde0bc1ecc0a0856e26e9d62a4e77c408",
+    "zh:e243c9d91feb0979638f28eb26f89ebadc179c57a2bd299b5729fb52bd1902f2",
+    "zh:f6c05e20d9a3fba76ca5f47206dde35e5b43b6821c6cbf57186164ce27ba9f15",
+  ]
+}
diff --git a/tf/infra.tf b/tf/infra.tf
index 466eaf9..ab364d0 100644
--- a/tf/infra.tf
+++ b/tf/infra.tf
@@ -20,13 +20,8 @@ provider "aws" {
 
 resource "aws_s3_bucket" "riju_debs" {
   bucket = "riju-debs"
-  acl    = "private"
+  acl    = "public-read"
   tags = {
     Terraform = "Managed by Terraform"
   }
 }
-
-resource "aws_ecr_repository" "riju_app" {
-  name                 = "riju-app"
-  image_tag_mutability = "IMMUTABLE"
-}