# =============================================================================
# CLOUDFLARE : Gateway : Setting
# =============================================================================

# 
resource "cloudflare_zero_trust_gateway_settings" "example_zero_trust_gateway_settings" {
  account_id = local.cloudflare_account_id

  settings = {
    activity_log = {
      enabled = true
    }

    antivirus = {
      enabled_download_phase = true
      enabled_upload_phase   = false
      fail_closed            = false
      notification_settings = {
        enabled = true
        include_context = true
        msg = "msg"
        support_url = "https://example.com/logo.png"
      }
    }

    block_page = {
      enabled          = true
      name             = "Your Team Name"
      header_text      = "This website is blocked"
      footer_text      = "Some description"
      include_context  = true
      logo_path        = "https://example.com/logo.png"
      background_color = "#e8e8e8"
    }

    body_scanning = {
      inspection_mode = "deep"
    }

    browser_isolation = {
      non_identity_enabled = true
      url_browser_isolation_enabled = true
    }

    custom_certificate = {
      enabled = true
#      id = "d1b364c5-1311-466e-a194-f0e943e0799f"
    }
    
    extended_email_matching = {
      enabled = true
    }

    fips = {
      tls = true
    }

    host_selector = {
      enabled = false
    }

    inspection = {
      mode = "static"
    }

    protocol_detection = {
      enabled = true
    }

    sandbox = {
      enabled = true
      fallback_action = "allow"
    }
    tls_decrypt = {
      enabled = true
    }
  }  
}