tofu/cloudflare/default.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26

{lib, ...}: {
  imports = [
    ./dns.nix
    ./ruleset.nix
    ./tunnels.nix
  ];

  terraform.required_providers.cloudflare = {
    source = "cloudflare/cloudflare";
    version = "~> 4";
  };

  resource = {
    cloudflare_url_normalization_settings.incoming = {
      scope = "incoming";
      type = "cloudflare";
      zone_id = lib.tfRef "var.zone_id";
    };

    cloudflare_bot_management.bots = {
      enable_js = false;
      fight_mode = false;
      zone_id = lib.tfRef "var.zone_id";
    };
  };
}