From 68544bf304207c036623b435cab8e589097a73d5 Mon Sep 17 00:00:00 2001
From: Hubert Cornet <hcornet@noreply@tips-of-mine.fr>
Date: Mon, 17 Nov 2025 12:26:24 +0100
Subject: [PATCH] Add gateway_setting.tf

---
 gateway_setting.tf | 74 ++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 74 insertions(+)
 create mode 100644 gateway_setting.tf

diff --git a/gateway_setting.tf b/gateway_setting.tf
new file mode 100644
index 0000000..0aef928
--- /dev/null
+++ b/gateway_setting.tf
@@ -0,0 +1,74 @@
+# =============================================================================
+# CLOUDFLARE : Gateway : Setting
+# =============================================================================
+
+# 
+resource "cloudflare_zero_trust_gateway_settings" "example_zero_trust_gateway_settings" {
+  account_id = local.cloudflare_account_id
+  settings = {
+    activity_log = {
+      enabled = true
+    }
+    antivirus = {
+      enabled_download_phase = false
+      enabled_upload_phase = false
+      fail_closed = false
+      notification_settings = {
+        enabled = true
+        include_context = true
+        msg = "msg"
+        support_url = "support_url"
+      }
+    }
+    block_page = {
+      background_color = "background_color"
+      enabled = true
+      footer_text = "--footer--"
+      header_text = "--header--"
+      include_context = true
+      logo_path = "https://logos.com/a.png"
+      mailto_address = "admin@tips-of-mine.org"
+      mailto_subject = "Blocked User Inquiry"
+      mode = ""
+      name = "Cloudflare"
+      suppress_footer = false
+      target_uri = "https://tips-of-mine.org"
+    }
+    body_scanning = {
+      inspection_mode = "deep"
+    }
+    browser_isolation = {
+      non_identity_enabled = true
+      url_browser_isolation_enabled = true
+    }
+    certificate = {
+      id = "d1b364c5-1311-466e-a194-f0e943e0799f"
+    }
+    custom_certificate = {
+      enabled = true
+      id = "d1b364c5-1311-466e-a194-f0e943e0799f"
+    }
+    extended_email_matching = {
+      enabled = true
+    }
+    fips = {
+      tls = true
+    }
+    host_selector = {
+      enabled = false
+    }
+    inspection = {
+      mode = "static"
+    }
+    protocol_detection = {
+      enabled = true
+    }
+    sandbox = {
+      enabled = true
+      fallback_action = "allow"
+    }
+    tls_decrypt = {
+      enabled = true
+    }
+  }
+}
\ No newline at end of file