hcornet
c6b46d00e1
All checks were successful
Terraform Apply / Terraform Apply (push) Successful in 4m35s
97 lines
3.6 KiB
HCL
97 lines
3.6 KiB
HCL
# =============================================================================
|
|
# CLOUDFLARE : Access Controls : Applications > self_hosted
|
|
# =============================================================================
|
|
|
|
#======================================================
|
|
# INFRASTRUCTURE Application: Test Home Network Access
|
|
#======================================================
|
|
|
|
#
|
|
resource "cloudflare_zero_trust_access_application" "zero_trust_access_application" {
|
|
account_id = local.cloudflare_account_id
|
|
|
|
type = "self_hosted"
|
|
name = "Home Network Access Application"
|
|
domain = "home.tips-of-mine.org"
|
|
session_duration = "24h"
|
|
skip_interstitial = true
|
|
tags = [cloudflare_zero_trust_access_tag.tags["engineers"].name]
|
|
|
|
depends_on = [
|
|
cloudflare_zero_trust_access_tag.tags
|
|
]
|
|
}
|
|
|
|
#
|
|
data "cloudflare_zero_trust_access_application" "zero_trust_access_application" {
|
|
account_id = local.cloudflare_account_id
|
|
|
|
app_id = cloudflare_zero_trust_access_application.zero_trust_access_application.id
|
|
}
|
|
|
|
#======================================================
|
|
# SELF-HOSTED APP: Competition App
|
|
#======================================================
|
|
|
|
# Creating the Self-hosted Application for Competition web application
|
|
resource "cloudflare_zero_trust_access_application" "cloudflare_app_web_competition" {
|
|
account_id = local.cloudflare_account_id
|
|
|
|
type = "self_hosted"
|
|
name = var.cloudflare_sensitive_web_app_name
|
|
app_launcher_visible = true
|
|
logo_url = "https://img.freepik.com/free-vector/trophy_78370-345.jpg"
|
|
tags = [cloudflare_zero_trust_access_tag.tags["engineers"].name]
|
|
session_duration = "0s"
|
|
custom_deny_url = "https://denied.tips-of-mine.org/"
|
|
custom_non_identity_deny_url = "https://denied.tips-of-mine.org/"
|
|
|
|
destinations = [{
|
|
type = "public"
|
|
uri = var.cloudflare_aws_subdomain_web_sensitive
|
|
}]
|
|
|
|
allowed_idps = [
|
|
cloudflare_zero_trust_access_identity_provider.authentik_oidc.id,
|
|
]
|
|
auto_redirect_to_identity = true
|
|
allow_authenticate_via_warp = false
|
|
|
|
policies = [{
|
|
id = cloudflare_zero_trust_access_policy.policies["competition_web_app"].id
|
|
}]
|
|
}
|
|
|
|
#======================================================
|
|
# SELF-HOSTED APP: Macharpe Intranet
|
|
#======================================================
|
|
|
|
# Creating the Self-hosted Application for Administration web application
|
|
resource "cloudflare_zero_trust_access_application" "cloudflare_app_web_intranet" {
|
|
account_id = local.cloudflare_account_id
|
|
|
|
type = "self_hosted"
|
|
name = var.cloudflare_intranet_web_app_name
|
|
app_launcher_visible = true
|
|
logo_url = "https://raw.githubusercontent.com/uditkumar489/Icon-pack/master/Entrepreneur/digital-marketing/svg/computer-1.svg"
|
|
tags = [cloudflare_zero_trust_access_tag.tags["engineers"].name]
|
|
session_duration = "0s"
|
|
custom_deny_url = "https://denied.tips-of-mine.org/"
|
|
custom_non_identity_deny_url = "https://denied.tips-of-mine.org/"
|
|
|
|
destinations = [{
|
|
type = "public"
|
|
uri = var.cloudflare_aws_subdomain_web
|
|
}]
|
|
|
|
allowed_idps = [
|
|
cloudflare_zero_trust_access_identity_provider.authentik_oidc.id,
|
|
]
|
|
auto_redirect_to_identity = true
|
|
allow_authenticate_via_warp = false
|
|
|
|
policies = [{
|
|
id = cloudflare_zero_trust_access_policy.policies["intranet_web_app"].id
|
|
}]
|
|
}
|