add app

Access_Controls-Applications.tf

@@ -52,8 +52,8 @@ resource "cloudflare_zero_trust_access_application" "cloudflare_app_ssh_infra" {
   name                         = var.cloudflare_infra_app_name
   logo_url                     = "https://upload.wikimedia.org/wikipedia/commons/0/01/Google-cloud-platform.svg"
   tags                         = ["engineers"]
-  custom_deny_url              = "https://denied.macharpe.com/"
-  custom_non_identity_deny_url = "https://denied.macharpe.com/"
+  custom_deny_url              = "https://denied.tips-of-mine.org/"
+  custom_non_identity_deny_url = "https://denied.tips-of-mine.org/"
 
   target_criteria = [{
     port     = "22",
@@ -119,3 +119,39 @@ resource "cloudflare_zero_trust_access_application" "cloudflare_app_ssh_infra" {
     }
   }]
 }
+
+#======================================================
+# SELF-HOSTED APP: DB Server
+#======================================================
+
+# Creating the Self-hosted Application for Browser rendering SSH
+resource "cloudflare_zero_trust_access_application" "cloudflare_app_ssh_browser" {
+  account_id                   = local.cloudflare_account_id
+
+  type                         = "ssh"
+  name                         = var.cloudflare_browser_ssh_app_name
+  app_launcher_visible         = true
+  logo_url                     = "https://cdn.iconscout.com/icon/free/png-256/free-database-icon-download-in-svg-png-gif-file-formats--ui-elements-pack-user-interface-icons-444649.png"
+  tags                         = ["engineers"]
+  session_duration             = "0s"
+  custom_deny_url              = "https://denied.tips-of-mine.org/"
+  custom_non_identity_deny_url = "https://denied.tips-of-mine.org/"
+
+  destinations = [{
+    type = "public"
+    uri  = var.cloudflare_subdomain_ssh
+  }]
+
+  allowed_idps                = [var.cloudflare_okta_identity_provider_id, var.cloudflare_otp_identity_provider_id]
+  auto_redirect_to_identity   = false
+  allow_authenticate_via_warp = false
+
+  policies = [
+    {
+      id = cloudflare_zero_trust_access_policy.policies["employees_browser_rendering"].id
+    },
+    {
+      id = cloudflare_zero_trust_access_policy.policies["contractors_browser_rendering"].id
+    }
+  ]
+}