72 lines
2.8 KiB
HCL
72 lines
2.8 KiB
HCL
# =============================================================================
|
|
# CLOUDFLARE : Access Controls : Applications
|
|
# =============================================================================
|
|
|
|
#======================================================
|
|
# SELF-HOSTED APP: PostgresDB Admin
|
|
#======================================================
|
|
|
|
# Creating the Self-hosted Application for Browser rendering VNC
|
|
resource "cloudflare_zero_trust_access_application" "cloudflare_aws_app_vnc_browser" {
|
|
account_id = local.cloudflare_account_id
|
|
|
|
type = "vnc"
|
|
name = var.cloudflare_aws_browser_vnc_app_name
|
|
app_launcher_visible = true
|
|
logo_url = "https://blog.zwindler.fr/2015/07/vnc.png"
|
|
tags = [cloudflare_zero_trust_access_tag.tags["engineers"].name]
|
|
session_duration = "0s"
|
|
custom_deny_url = "https://denied.tips-of-mine.org/"
|
|
custom_non_identity_deny_url = "https://denied.tips-of-mine.org/"
|
|
|
|
destinations = [{
|
|
type = "public"
|
|
uri = var.cloudflare_aws_subdomain_vnc
|
|
}]
|
|
|
|
allowed_idps = [
|
|
cloudflare_zero_trust_access_identity_provider.gmail.id,
|
|
cloudflare_zero_trust_access_identity_provider.authentik_oidc.id,
|
|
]
|
|
auto_redirect_to_identity = false
|
|
allow_authenticate_via_warp = false
|
|
|
|
policies = [{
|
|
id = cloudflare_zero_trust_access_policy.policies["aws_employees_browser_rendering"].id
|
|
}]
|
|
}
|
|
|
|
#======================================================
|
|
# SELF-HOSTED APP: PostgresDB Admin
|
|
#======================================================
|
|
|
|
# Creating the Self-hosted Application for Browser rendering VNC
|
|
resource "cloudflare_zero_trust_access_application" "cloudflare_gcp_app_vnc_browser" {
|
|
account_id = local.cloudflare_account_id
|
|
|
|
type = "vnc"
|
|
name = var.cloudflare_gcp_browser_vnc_app_name
|
|
app_launcher_visible = true
|
|
logo_url = "https://blog.zwindler.fr/2015/07/vnc.png"
|
|
tags = [cloudflare_zero_trust_access_tag.tags["engineers"].name]
|
|
session_duration = "0s"
|
|
custom_deny_url = "https://denied.tips-of-mine.org/"
|
|
custom_non_identity_deny_url = "https://denied.tips-of-mine.org/"
|
|
|
|
destinations = [{
|
|
type = "public"
|
|
uri = var.cloudflare_gcp_subdomain_vnc
|
|
}]
|
|
|
|
allowed_idps = [
|
|
cloudflare_zero_trust_access_identity_provider.gmail.id,
|
|
cloudflare_zero_trust_access_identity_provider.authentik_oidc.id,
|
|
]
|
|
auto_redirect_to_identity = false
|
|
allow_authenticate_via_warp = false
|
|
|
|
policies = [{
|
|
id = cloudflare_zero_trust_access_policy.policies["gcp_employees_browser_rendering"].id
|
|
}]
|
|
}
|