diff --git a/Access_Controls-Applications.tf b/Access_Controls-Applications.tf index db56b47..d93a366 100644 --- a/Access_Controls-Applications.tf +++ b/Access_Controls-Applications.tf @@ -52,8 +52,8 @@ resource "cloudflare_zero_trust_access_application" "cloudflare_app_ssh_infra" { name = var.cloudflare_infra_app_name logo_url = "https://upload.wikimedia.org/wikipedia/commons/0/01/Google-cloud-platform.svg" tags = ["engineers"] - custom_deny_url = "https://denied.macharpe.com/" - custom_non_identity_deny_url = "https://denied.macharpe.com/" + custom_deny_url = "https://denied.tips-of-mine.org/" + custom_non_identity_deny_url = "https://denied.tips-of-mine.org/" target_criteria = [{ port = "22", @@ -119,3 +119,39 @@ resource "cloudflare_zero_trust_access_application" "cloudflare_app_ssh_infra" { } }] } + +#====================================================== +# SELF-HOSTED APP: DB Server +#====================================================== + +# Creating the Self-hosted Application for Browser rendering SSH +resource "cloudflare_zero_trust_access_application" "cloudflare_app_ssh_browser" { + account_id = local.cloudflare_account_id + + type = "ssh" + name = var.cloudflare_browser_ssh_app_name + app_launcher_visible = true + logo_url = "https://cdn.iconscout.com/icon/free/png-256/free-database-icon-download-in-svg-png-gif-file-formats--ui-elements-pack-user-interface-icons-444649.png" + tags = ["engineers"] + session_duration = "0s" + custom_deny_url = "https://denied.tips-of-mine.org/" + custom_non_identity_deny_url = "https://denied.tips-of-mine.org/" + + destinations = [{ + type = "public" + uri = var.cloudflare_subdomain_ssh + }] + + allowed_idps = [var.cloudflare_okta_identity_provider_id, var.cloudflare_otp_identity_provider_id] + auto_redirect_to_identity = false + allow_authenticate_via_warp = false + + policies = [ + { + id = cloudflare_zero_trust_access_policy.policies["employees_browser_rendering"].id + }, + { + id = cloudflare_zero_trust_access_policy.policies["contractors_browser_rendering"].id + } + ] +} \ No newline at end of file