1 files changed, 12 insertions, 0 deletions

diff --git a/clarkzjw.cc/infra/tunnel.tf b/clarkzjw.cc/infra/tunnel.tf
index 4ec9a7f..ba929c2 100644
--- a/clarkzjw.cc/infra/tunnel.tf
+++ b/clarkzjw.cc/infra/tunnel.tf
@@ -10,12 +10,24 @@ resource "cloudflare_tunnel_config" "atlas_tunnel_route" {
   tunnel_id  = cloudflare_argo_tunnel.atlas_main_tunnel.id
 
   config {
+    // TODO: https://github.com/cloudflare/terraform-provider-cloudflare/issues/2072
+    // It seems the `origin_request` here doesn't enable `no_tls_verify` in each ingress_rule
+    // For now, you have to enable `no_tls_verify` in the dashboard
+    origin_request {
+        no_tls_verify            = true
+    }
     ingress_rule {
       hostname = "bt.${var.homelab_main_domain}"
       path     = "/"
       service  = "http://127.0.0.1:8080"
     }
     ingress_rule {
+      hostname = "edgerouterx.${var.homelab_main_domain}"
+      path     = "/"
+      service  = "https://${var.edgerouterx_ip}"
+
+    }
+    ingress_rule {
       service = "http_status:404"
     }
   }