Files
homelab/cloudflare/policies/main.tf

47 lines
1.0 KiB
HCL

resource "cloudflare_zero_trust_list" "family_emails" {
account_id = var.cloudflare_account_id
name = "Me & Family"
type = "EMAIL"
items = [
{
value = "madundead@gmail.com",
},
{
value = "mail.elenka@gmail.com"
}
]
}
resource "cloudflare_zero_trust_access_policy" "allow_myself" {
account_id = var.cloudflare_account_id
name = "Allow myself, by OTP via email"
decision = "allow"
include = [
{
email = {
email = var.cloudflare_email
}
}
]
}
resource "cloudflare_zero_trust_access_policy" "allow_myself_and_family" {
account_id = var.cloudflare_account_id
name = "Allow myself & Olena by OTP via email"
decision = "allow"
include = [
{
email_list = cloudflare_zero_trust_list.family_emails
}
]
}
resource "cloudflare_zero_trust_access_policy" "allow_everyone" {
account_id = var.cloudflare_account_id
name = "Allow everyone"
decision = "bypass"
include = [{
everyone = { }
}]
}