diff options
Diffstat (limited to 'clarkzjw.cc/infra/cloudflare_access.tf')
-rw-r--r-- | clarkzjw.cc/infra/cloudflare_access.tf | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/clarkzjw.cc/infra/cloudflare_access.tf b/clarkzjw.cc/infra/cloudflare_access.tf index 0708a53..267b1f7 100644 --- a/clarkzjw.cc/infra/cloudflare_access.tf +++ b/clarkzjw.cc/infra/cloudflare_access.tf | |||
@@ -43,3 +43,25 @@ resource "cloudflare_access_policy" "edgerouterx" { | |||
43 | email = [var.cloudflare_access_application_email] | 43 | email = [var.cloudflare_access_application_email] |
44 | } | 44 | } |
45 | } | 45 | } |
46 | |||
47 | # proxmox | ||
48 | resource "cloudflare_access_application" "proxmox" { | ||
49 | zone_id = data.cloudflare_zones.homelab_main_domain.zones[0].id | ||
50 | name = "proxmox.${var.homelab_main_domain}" | ||
51 | domain = "proxmox.${var.homelab_main_domain}" | ||
52 | type = "self_hosted" | ||
53 | session_duration = "24h" | ||
54 | auto_redirect_to_identity = false | ||
55 | } | ||
56 | |||
57 | resource "cloudflare_access_policy" "proxmox" { | ||
58 | application_id = cloudflare_access_application.proxmox.id | ||
59 | zone_id = data.cloudflare_zones.homelab_main_domain.zones[0].id | ||
60 | name = "Allow" | ||
61 | precedence = "1" | ||
62 | decision = "allow" | ||
63 | |||
64 | include { | ||
65 | email = [var.cloudflare_access_application_email] | ||
66 | } | ||
67 | } | ||