diff options
Diffstat (limited to 'clarkzjw.cc/infra/cloudflare.tf')
-rw-r--r-- | clarkzjw.cc/infra/cloudflare.tf | 21 |
1 files changed, 21 insertions, 0 deletions
diff --git a/clarkzjw.cc/infra/cloudflare.tf b/clarkzjw.cc/infra/cloudflare.tf index 0b40e57..13e7f41 100644 --- a/clarkzjw.cc/infra/cloudflare.tf +++ b/clarkzjw.cc/infra/cloudflare.tf | |||
@@ -62,6 +62,27 @@ resource "cloudflare_tunnel_config" "atlas_tunnel_route" { | |||
62 | } | 62 | } |
63 | } | 63 | } |
64 | 64 | ||
65 | resource "cloudflare_access_application" "bt" { | ||
66 | zone_id = data.cloudflare_zones.homelab_main_domain.zones[0].id | ||
67 | name = "bt.${var.homelab_main_domain}" | ||
68 | domain = "bt.${var.homelab_main_domain}" | ||
69 | type = "self_hosted" | ||
70 | session_duration = "24h" | ||
71 | auto_redirect_to_identity = false | ||
72 | } | ||
73 | |||
74 | resource "cloudflare_access_policy" "bt" { | ||
75 | application_id = cloudflare_access_application.bt.id | ||
76 | zone_id = data.cloudflare_zones.homelab_main_domain.zones[0].id | ||
77 | name = "Allow" | ||
78 | precedence = "1" | ||
79 | decision = "allow" | ||
80 | |||
81 | include { | ||
82 | email = [var.cloudflare_access_application_email] | ||
83 | } | ||
84 | } | ||
85 | |||
65 | # notify | 86 | # notify |
66 | resource "cloudflare_record" "notify_SPF" { | 87 | resource "cloudflare_record" "notify_SPF" { |
67 | zone_id = data.cloudflare_zones.homelab_main_domain.zones[0].id | 88 | zone_id = data.cloudflare_zones.homelab_main_domain.zones[0].id |