Tips-Of-Mine/terraform-cloudflare-tunnel-zone-org
2
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

Update gateway_policy.tf
All checks were successful
Terraform Apply / Terraform Apply (push) Successful in 56s
Details

Browse Source
This commit is contained in:
Hubert Cornet
2025-11-17 15:25:15 +01:00
parent 755800c0b3
commit 288fac4c28
1 changed files with 12 additions and 35 deletions
Download Patch File Download Diff File Expand all files Collapse all files

47
gateway_policy.tf
View File

@@ -21,17 +21,11 @@ resource "cloudflare_zero_trust_gateway_policy" "block_malware" {
} }
# POLICY: Block Ads # POLICY: Block Ads
locals { locals {
# Iterate through each ads_domain_list resource and extract its ID ads_domain_lists = [for k, v in cloudflare_zero_trust_list.ads_domain_lists : v.id]
ads_domain_lists = [for k, v in cloudflare_zero_trust_list.ads_domain_lists : v.id]
# Format the values: remove dashes and prepend $
ads_domain_lists_formatted = [for v in local.ads_domain_lists : format("$%s", replace(v, "-", ""))] ads_domain_lists_formatted = [for v in local.ads_domain_lists : format("$%s", replace(v, "-", ""))]
ads_ad_filters = formatlist("any(dns.domains[*] in %s)", local.ads_domain_lists_formatted)
# Create filters to use in the policy ads_ad_filter = join(" or ", local.ads_ad_filters)
ads_ad_filters = formatlist("any(dns.domains[*] in %s)", local.ads_domain_lists_formatted)
ads_ad_filter = join(" or ", local.ads_ad_filters)
} }
resource "cloudflare_zero_trust_gateway_policy" "block_ads" { resource "cloudflare_zero_trust_gateway_policy" "block_ads" {
@@ -52,31 +46,15 @@ resource "cloudflare_zero_trust_gateway_policy" "block_ads" {
} }
locals { locals {
# The full path of the list holding the domain list ads_domain_list_file = "${path.module}/lists/pihole_domain_list.txt"
# ads_domain_list_file = file("${path.module}/lists/pihole_domain_list.txt") ads_domain_list = length(file(local.ads_domain_list_file)) > 0 ? split("\n", file(local.ads_domain_list_file)) : []
ads_domain_list_file = "${path.module}/lists/pihole_domain_list.txt" ads_domain_list_clean = [for x in local.ads_domain_list : x if x != ""]
ads_aggregated_lists = chunklist(local.ads_domain_list_clean, 1000)
# Parse the file and create a list, one item per line ads_list_count = length(local.ads_aggregated_lists)
#ads_domain_list = split("\n", file(local.ads_domain_list_file)) ads_domain_lists_new = [for k, v in cloudflare_zero_trust_list.ads_domain_lists : v.id]
ads_domain_list = length(file(local.ads_domain_list_file)) > 0 ? split("\n", file(local.ads_domain_list_file)) : []
# Remove empty lines
ads_domain_list_clean = [for x in local.ads_domain_list : x if x != ""]
# Use chunklist to split a list into fixed-size chunks
# It returns a list of lists
ads_aggregated_lists = chunklist(local.ads_domain_list_clean, 1000)
# Get the number of lists (chunks) created
ads_list_count = length(local.ads_aggregated_lists)
# Formatage des domaines en identifiants Cloudflare
ads_domain_lists_new = [for k, v in cloudflare_zero_trust_list.ads_domain_lists : v.id]
ads_domain_lists_formatted_new = [for v in local.ads_domain_lists_new : format("$%s", replace(v, "-", ""))] ads_domain_lists_formatted_new = [for v in local.ads_domain_lists_new : format("$%s", replace(v, "-", ""))]
ads_ad_filters_new = formatlist("any(dns.domains[*] in %s)", local.ads_domain_lists_formatted_new)
# Créer un filtre pour les domaines à bloquer ads_ad_filter_new = join(" or ", local.ads_ad_filters_new)
ads_ad_filters_new = formatlist("any(dns.domains[*] in %s)", local.ads_domain_lists_formatted_new)
ads_ad_filter_new = join(" or ", local.ads_ad_filters_new)
} }
resource "cloudflare_zero_trust_list" "ads_domain_lists" { resource "cloudflare_zero_trust_list" "ads_domain_lists" {
@@ -89,9 +67,8 @@ resource "cloudflare_zero_trust_list" "ads_domain_lists" {
name = "ads_domain_list_${each.key}" name = "ads_domain_list_${each.key}"
type = "DOMAIN" type = "DOMAIN"
# items = each.value
items = [for domain in each.value : { items = [for domain in each.value : {
value = domain # Chaque domaine est maintenant un objet avec une clé 'value' value = domain
}] }]
} }