From fa5e2183756a1c0058761289f05df53efc387fa6 Mon Sep 17 00:00:00 2001
From: Hubert Cornet <hcornet@noreply@tips-of-mine.fr>
Date: Mon, 17 Nov 2025 20:07:53 +0100
Subject: [PATCH] Update gateway_dns_location.tf

---
 gateway_dns_location.tf | 165 +++++++++++++++++++++++++++++++++++++---
 1 file changed, 155 insertions(+), 10 deletions(-)

diff --git a/gateway_dns_location.tf b/gateway_dns_location.tf
index 8c6465a..34a604d 100644
--- a/gateway_dns_location.tf
+++ b/gateway_dns_location.tf
@@ -8,15 +8,6 @@ resource "cloudflare_zero_trust_dns_location" "dns_location_office" {
   name = "Office Location"
   client_default = false
   ecs_support = false
-}
-
-# 
-resource "cloudflare_zero_trust_dns_location" "dns_location_home" {
-  account_id = local.cloudflare_account_id
-  name = "Home Location"
-  client_default = false
-#  dns_destination_ips_id = "0e4a32c6-6fb8-4858-9296-98f51631e8e6"
-  ecs_support = false
   endpoints = {
     doh = {
       enabled = true
@@ -46,10 +37,164 @@ resource "cloudflare_zero_trust_dns_location" "dns_location_home" {
   }]
 }
 
+# 
+resource "cloudflare_zero_trust_dns_location" "dns_location_home" {
+  account_id = local.cloudflare_account_id
+  name = "Home Location"
+  client_default = false
+#  dns_destination_ips_id = "0e4a32c6-6fb8-4858-9296-98f51631e8e6"
+  ecs_support = true
+  endpoints = {
+    doh = {
+      enabled = true
+      networks = [{
+        network = "2001:85a3::/64"
+      }]
+      require_token = true
+    }
+    dot = {
+      enabled = true
+      networks = [{
+        network = "2001:85a3::/64"
+      }]
+    }
+  }
+}
+
 # 
 resource "cloudflare_zero_trust_dns_location" "dns_location_vacation" {
   account_id = local.cloudflare_account_id
   name = "Vacation Location"
   client_default = false
-  ecs_support = false
+  ecs_support = true
+  endpoints = {
+    doh = {
+      enabled = true
+      networks = [{
+        network = "2001:85a3::/64"
+      }]
+      require_token = true
+    }
+    dot = {
+      enabled = true
+      networks = [{
+        network = "2001:85a3::/64"
+      }]
+    }
+  }
 }
+
+# 
+resource "cloudflare_zero_trust_dns_location" "dns_location_datacenter" {
+  account_id = local.cloudflare_account_id
+  name = "Datacenter Location"
+  client_default = false
+  ecs_support = true
+  endpoints = {
+    doh = {
+      enabled = true
+      networks = [{
+        network = "2001:85a3::/64"
+      }]
+      require_token = true
+    }
+    dot = {
+      enabled = true
+      networks = [{
+        network = "2001:85a3::/64"
+      }]
+    }
+  }
+}
+
+# 
+resource "cloudflare_zero_trust_dns_location" "dns_location_GCP" {
+  account_id = local.cloudflare_account_id
+  name = "GCP Location"
+  client_default = false
+  ecs_support = true
+  endpoints = {
+    doh = {
+      enabled = true
+      networks = [{
+        network = "2001:85a3::/64"
+      }]
+      require_token = true
+    }
+    dot = {
+      enabled = true
+      networks = [{
+        network = "2001:85a3::/64"
+      }]
+    }
+  }
+}
+
+# 
+resource "cloudflare_zero_trust_dns_location" "dns_location_azure" {
+  account_id = local.cloudflare_account_id
+  name = "Azure Location"
+  client_default = false
+  ecs_support = true
+  endpoints = {
+    doh = {
+      enabled = true
+      networks = [{
+        network = "2001:85a3::/64"
+      }]
+      require_token = true
+    }
+    dot = {
+      enabled = true
+      networks = [{
+        network = "2001:85a3::/64"
+      }]
+    }
+  }
+}
+
+# 
+resource "cloudflare_zero_trust_dns_location" "dns_location_ovh" {
+  account_id = local.cloudflare_account_id
+  name = "OVH Location"
+  client_default = false
+  ecs_support = true
+  endpoints = {
+    doh = {
+      enabled = true
+      networks = [{
+        network = "2001:85a3::/64"
+      }]
+      require_token = true
+    }
+    dot = {
+      enabled = true
+      networks = [{
+        network = "2001:85a3::/64"
+      }]
+    }
+  }
+}
+
+# 
+resource "cloudflare_zero_trust_dns_location" "dns_location_aws" {
+  account_id = local.cloudflare_account_id
+  name = "AWS Location"
+  client_default = false
+  ecs_support = true
+  endpoints = {
+    doh = {
+      enabled = true
+      networks = [{
+        network = "2001:85a3::/64"
+      }]
+      require_token = true
+    }
+    dot = {
+      enabled = true
+      networks = [{
+        network = "2001:85a3::/64"
+      }]
+    }
+  }
+}
\ No newline at end of file