From 2843bc15bc8ac623c3eadbb30d03cac40bac0f8e Mon Sep 17 00:00:00 2001
From: Hubert Cornet <hcornet@noreply@tips-of-mine.fr>
Date: Fri, 4 Jul 2025 19:51:37 +0200
Subject: [PATCH] Actualiser .gitea/workflows/validate.yml

---
 .gitea/workflows/validate.yml | 20 ++++++++++++++++----
 1 file changed, 16 insertions(+), 4 deletions(-)

diff --git a/.gitea/workflows/validate.yml b/.gitea/workflows/validate.yml
index b73148a..094a12d 100644
--- a/.gitea/workflows/validate.yml
+++ b/.gitea/workflows/validate.yml
@@ -1,15 +1,21 @@
-name: terraform validation
+name: 'Terraform Apply'
 
 on:
   push:
-    branches: [main]
+    branches: [ main ]
   pull_request:
     types: [opened, reopened, edited, synchronize]
+permissions:
+  contents: read
 
 jobs:
   validate:
-    name: 'Terraform'
+    name: 'Terraform Apply'
     runs-on: ubuntu-latest
+    environment: production
+    defaults:
+      run:
+        shell: bash
 
     steps:
       - name: Checkout
@@ -36,4 +42,10 @@ jobs:
 
       - name: Terraform Plan
         id: plan
-        run: terraform plan
\ No newline at end of file
+        run: terraform plan -var="cloudflare_api_token=${{ secrets.CLOUDFLARE_API_TOKEN }}"
+        
+      - name: Terraform Apply
+        run: terraform apply -var="cloudflare_api_token=${{ secrets.CLOUDFLARE_API_TOKEN }}" --auto-approve --input=false
+
+      - name: Terraform Output
+        run: terraform output
\ No newline at end of file