resource "cloudflare_zero_trust_list" "family_emails" {
  account_id = var.cloudflare_account_id
  name       = "Me & Family"
  type = "EMAIL"
  items = [
    {
      value = "madundead@gmail.com",
    },
    {
      value = "mail.elenka@gmail.com"
    }
  ]
}

resource "cloudflare_zero_trust_access_policy" "allow_myself" {
  account_id = var.cloudflare_account_id
  name       = "Allow myself, by OTP via email"
  decision   = "allow"
  include = [
    {
      email = {
        email = var.cloudflare_email
      }
    }
  ]
}

resource "cloudflare_zero_trust_access_policy" "allow_myself_and_family" {
  account_id = var.cloudflare_account_id
  name       = "Allow myself & Olena by OTP via email"
  decision   = "allow"
  include = [
    {
      email_list = cloudflare_zero_trust_list.family_emails
    }
  ]
}

resource "cloudflare_zero_trust_access_policy" "allow_everyone" {
  account_id = var.cloudflare_account_id
  name       = "Allow everyone"
  decision   = "bypass"
  include = [{
      everyone = { }
  }]
}