Tips-Of-Mine/terraform-cloudflare-tunnel-zone-org
2
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

Update variables.auto.tfvars
Some checks failed
Terraform Apply / Terraform Apply (push) Failing after 12s
Details

Browse Source
This commit is contained in:
Hubert Cornet
2025-11-15 20:48:05 +01:00
parent 61aebc64e6
commit 3b49790001
1 changed files with 37 additions and 37 deletions
Download Patch File Download Diff File Expand all files Collapse all files

74
variables.auto.tfvars
View File

@@ -77,59 +77,59 @@ cloudflare_access_tags = [
#=====================================
# Cloudflare variables
#=====================================
cf_team_name = "macharpe"
cf_email_domain = "passfwd.com"
cloudflare_team_name = "macharpe"
cloudflare_email_domain = "passfwd.com"
# Tunnels
cf_tunnel_name_gcp = "Tunnel GCP (Access For Infrastructure)"
cf_tunnel_name_aws = "Tunnel AWS (SSH Browser Rendered)"
cf_windows_rdp_tunnel_name = "Tunnel GCP (Windows RDP)"
cloudflare_tunnel_name_gcp = "Tunnel GCP (Access For Infrastructure)"
cloudflare_tunnel_name_aws = "Tunnel AWS (SSH Browser Rendered)"
cloudflare_windows_rdp_tunnel_name = "Tunnel GCP (Windows RDP)"
# WARP Connector Tunnels - Sensitive: manually retrieved from Cloudflare dashboard
cf_warp_tunnel_azure_id = "185f0bc0-986d-********"
cf_warp_tunnel_gcp_id = "ad04a3ed-a1a1-********"
cloudflare_warp_tunnel_azure_id = "185f0bc0-986d-********"
cloudflare_warp_tunnel_gcp_id = "ad04a3ed-a1a1-********"
# Subdomains
cf_subdomain_ssh = "ssh-database.example.com"
cf_subdomain_vnc = "vnc.example.com"
cf_subdomain_web = "intranet.example.com"
cf_subdomain_rdp = "rdp.example.com"
cf_subdomain_web_sensitive = "competition.example.com"
cf_subdomain_training_status = "training-status.example.com" # OPTIONAL: Only needed if using optional-cloudflare-apps.tf and Training Compliance Gateway
cloudflare_subdomain_ssh = "ssh-database.example.com"
cloudflare_subdomain_vnc = "vnc.example.com"
cloudflare_subdomain_web = "intranet.example.com"
cloudflare_subdomain_rdp = "rdp.example.com"
cloudflare_subdomain_web_sensitive = "competition.example.com"
cloudflare_subdomain_training_status = "training-status.example.com" # OPTIONAL: Only needed if using optional-cloudflare-apps.tf and Training Compliance Gateway
# Targets
cf_target_ssh_name = "GCP-database"
cf_target_rdp_name = "Domain-Controller"
cloudflare_target_ssh_name = "GCP-database"
cloudflare_target_rdp_name = "Domain-Controller"
# Applications
cf_infra_app_name = "GCP Infrastructure SSH database"
cf_browser_ssh_app_name = "AWS Browser SSH database"
cf_browser_vnc_app_name = "AWS Browser VNC database"
cf_browser_rdp_app_name = "GCP Browser RDP windows"
cf_sensitive_web_app_name = "Competition App"
cf_intranet_web_app_name = "Intranet"
cloudflare_infra_app_name = "GCP Infrastructure SSH database"
cloudflare_browser_ssh_app_name = "AWS Browser SSH database"
cloudflare_browser_vnc_app_name = "AWS Browser VNC database"
cloudflare_browser_rdp_app_name = "GCP Browser RDP windows"
cloudflare_sensitive_web_app_name = "Competition App"
cloudflare_intranet_web_app_name = "Intranet"
# Application Ports
cf_competition_app_port = 8080
cf_intranet_app_port = 8181
cf_domain_controller_rdp_port = 3389
cloudflare_competition_app_port = 8080
cloudflare_intranet_app_port = 8181
cloudflare_domain_controller_rdp_port = 3389
# Identity Providers - Sensitive: manually retrieved from Cloudflare dashboard
cf_okta_identity_provider_id = "8fd4786e-97d7-4257-********"
cf_otp_identity_provider_id = "a6dfbf35-0e20-4244-********"
cf_azure_identity_provider_id = "8c593fe8-aee3-4075-********"
cf_azure_admin_rule_group_id = "5f253130-a400-4215-********"
cloudflare_okta_identity_provider_id = "8fd4786e-97d7-4257-********"
cloudflare_otp_identity_provider_id = "a6dfbf35-0e20-4244-********"
cloudflare_azure_identity_provider_id = "8c593fe8-aee3-4075-********"
cloudflare_azure_admin_rule_group_id = "5f253130-a400-4215-********"
# Device Posture - Sensitive: manually retrieved from Cloudflare dashboard
cf_gateway_posture_id = "4d8d7499-38c3-4bf0-********"
cf_macos_posture_id = "6d64ff80-1308-4462-********"
cf_ios_posture_id = "56454654-1245-8564-********"
cf_windows_posture_id = "67b05735-3b9b-4bcc-********"
cf_linux_posture_id = "ed5639c7-3305-4a91-********"
cf_device_os = "mac" # Options: "linux", "windows", "mac"
cloudflare_gateway_posture_id = "4d8d7499-38c3-4bf0-********"
cloudflare_macos_posture_id = "6d64ff80-1308-4462-********"
cloudflare_ios_posture_id = "56454654-1245-8564-********"
cloudflare_windows_posture_id = "67b05735-3b9b-4bcc-********"
cloudflare_linux_posture_id = "ed5639c7-3305-4a91-********"
cloudflare_device_os = "mac" # Options: "linux", "windows", "mac"
# WARP CGNAT Routes
cf_custom_cgnat_routes = [
cloudflare_custom_cgnat_routes = [
{
address = "100.64.0.0/11"
description = "WARP Connector CGNAT 1"
@@ -140,12 +140,12 @@ cf_custom_cgnat_routes = [
}
]
cf_default_cgnat_routes = [{
cloudflare_default_cgnat_routes = [{
address = "100.64.0.0/10"
description = "Default CGNAT Range"
}]
cf_warp_cgnat_cidr = "100.96.0.0/12"
cloudflare_warp_cgnat_cidr = "100.96.0.0/12"
#=====================================