1 files changed, 23 insertions, 0 deletions

diff --git a/clarkzjw.cc/infra/cloudflare_access.tf b/clarkzjw.cc/infra/cloudflare_access.tf
index 00dfcee..0708a53 100644
--- a/clarkzjw.cc/infra/cloudflare_access.tf
+++ b/clarkzjw.cc/infra/cloudflare_access.tf
@@ -1,5 +1,6 @@
 # Cloudflare Access Policy
 
+# bt
 resource "cloudflare_access_application" "bt" {
   zone_id                   = data.cloudflare_zones.homelab_main_domain.zones[0].id
   name                      = "bt.${var.homelab_main_domain}"
@@ -20,3 +21,25 @@ resource "cloudflare_access_policy" "bt" {
     email = [var.cloudflare_access_application_email]
   }
 }
+
+# router
+resource "cloudflare_access_application" "edgerouterx" {
+  zone_id                   = data.cloudflare_zones.homelab_main_domain.zones[0].id
+  name                      = "edgerouterx.${var.homelab_main_domain}"
+  domain                    = "edgerouterx.${var.homelab_main_domain}"
+  type                      = "self_hosted"
+  session_duration          = "24h"
+  auto_redirect_to_identity = false
+}
+
+resource "cloudflare_access_policy" "edgerouterx" {
+  application_id = cloudflare_access_application.edgerouterx.id
+  zone_id        = data.cloudflare_zones.homelab_main_domain.zones[0].id
+  name           = "Allow"
+  precedence     = "1"
+  decision       = "allow"
+
+  include {
+    email = [var.cloudflare_access_application_email]
+  }
+}