From 077a6d4eeee4dc2caa6b75d38ddf98da59fc938b Mon Sep 17 00:00:00 2001 From: Hubert Cornet Date: Mon, 17 Nov 2025 12:40:13 +0100 Subject: [PATCH] Update gateway_setting.tf --- gateway_setting.tf | 99 ++++++++++++++++++++++++++++++---------------- 1 file changed, 64 insertions(+), 35 deletions(-) diff --git a/gateway_setting.tf b/gateway_setting.tf index f3637ef..08b6670 100644 --- a/gateway_setting.tf +++ b/gateway_setting.tf @@ -5,45 +5,74 @@ # resource "cloudflare_zero_trust_gateway_settings" "example_zero_trust_gateway_settings" { account_id = local.cloudflare_account_id - block_page { - enabled = true - name = "Your Team Name" - header_text = "This website is blocked" - footer_text = "Some description" - logo_path = "https://example.com/logo.png" - background_color = "#e8e8e8" - } - antivirus { - enabled_download_phase = true - enabled_upload_phase = false - fail_closed = false - } + settings = { + activity_log = { + enabled = true + } - proxy { - tcp = true - udp = true - } - - logging { - redact_pii = true - settings_by_rule_type { - dns { - log_all = true - log_blocks = false - } - http { - log_all = true - log_blocks = false - } - l4 { - log_all = true - log_blocks = false + antivirus = { + enabled_download_phase = true + enabled_upload_phase = false + fail_closed = false + notification_settings = { + enabled = true + include_context = true + msg = "msg" + support_url = "https://example.com/logo.png" } } - } - activity_log_enabled = true - tls_decrypt_enabled = false + block_page = { + enabled = true + name = "Your Team Name" + header_text = "This website is blocked" + footer_text = "Some description" + include_context = true + logo_path = "https://example.com/logo.png" + background_color = "#e8e8e8" + } + body_scanning = { + inspection_mode = "deep" + } + + browser_isolation = { + non_identity_enabled = true + url_browser_isolation_enabled = true + } + + custom_certificate = { + enabled = true + id = "d1b364c5-1311-466e-a194-f0e943e0799f" + } + + extended_email_matching = { + enabled = true + } + + fips = { + tls = true + } + + host_selector = { + enabled = false + } + + inspection = { + mode = "static" + } + + protocol_detection = { + enabled = true + } + + sandbox = { + enabled = true + fallback_action = "allow" + } + tls_decrypt = { + enabled = true + } + } } \ No newline at end of file