# =============================================================================
# CLOUDFLARE : Access : Policies
# =============================================================================

#
#resource "cloudflare_zero_trust_access_policy" "home_network_policy" {
#  account_id     = local.cloudflare_account_id
#  application_id = cloudflare_zero_trust_access_application.example_zero_trust_access_application.id
#  name           = "Home Network Access Policy"
#  decision       = "allow"
#  include [{
#    email        = "thedjinhn@gmail.com"
#  }]
}

# =============================================================================
# CLOUDFLARE : Access : Rule groups
# =============================================================================

#
resource "cloudflare_zero_trust_access_group" "example_zero_trust_access_group" {
  include = [{
    group = {
#      id = "aa0a4aab-672b-4bdb-bc33-a59f1130a11f"
    }
  }]
  name = "Allow devs"
#  zone_id = "zone_id"
  exclude = [{
    group = {
#      id = "aa0a4aab-672b-4bdb-bc33-a59f1130a11f"
    }
  }]
  is_default = true
  require = [{
    group = {
#      id = "aa0a4aab-672b-4bdb-bc33-a59f1130a11f"
    }
  }]
}

# =============================================================================
# CLOUDFLARE : Access : Service auth
# =============================================================================

#