1 files changed, 22 insertions, 0 deletions

diff --git a/clarkzjw.cc/infra/cloudflare_access.tf b/clarkzjw.cc/infra/cloudflare_access.tf
new file mode 100644
index 0000000..00dfcee
--- /dev/null
+++ b/clarkzjw.cc/infra/cloudflare_access.tf
@@ -0,0 +1,22 @@
+# Cloudflare Access Policy
+
+resource "cloudflare_access_application" "bt" {
+  zone_id                   = data.cloudflare_zones.homelab_main_domain.zones[0].id
+  name                      = "bt.${var.homelab_main_domain}"
+  domain                    = "bt.${var.homelab_main_domain}"
+  type                      = "self_hosted"
+  session_duration          = "24h"
+  auto_redirect_to_identity = false
+}
+
+resource "cloudflare_access_policy" "bt" {
+  application_id = cloudflare_access_application.bt.id
+  zone_id        = data.cloudflare_zones.homelab_main_domain.zones[0].id
+  name           = "Allow"
+  precedence     = "1"
+  decision       = "allow"
+
+  include {
+    email = [var.cloudflare_access_application_email]
+  }
+}