83 lines
2.0 KiB
Terraform
83 lines
2.0 KiB
Terraform
# =============================================================================
|
|
# CLOUDFLARE : Traffic Policies : Traffic Settings : Policy Settings
|
|
# =============================================================================
|
|
|
|
#
|
|
resource "cloudflare_zero_trust_gateway_settings" "zero_trust_gateway_settings" {
|
|
account_id = local.cloudflare_account_id
|
|
|
|
settings = {
|
|
activity_log = {
|
|
enabled = true
|
|
}
|
|
|
|
antivirus = {
|
|
enabled_download_phase = true
|
|
enabled_upload_phase = false
|
|
fail_closed = false
|
|
notification_settings = {
|
|
enabled = true
|
|
include_context = true
|
|
msg = "msg"
|
|
support_url = "https://tips-of-mine.org/logo.png"
|
|
}
|
|
}
|
|
|
|
block_page = {
|
|
enabled = true
|
|
name = "Your Team Name"
|
|
header_text = "This website is blocked"
|
|
footer_text = "Some description"
|
|
include_context = true
|
|
logo_path = "https://tips-of-mine.org/logo.png"
|
|
background_color = "#e8e8e8"
|
|
}
|
|
|
|
body_scanning = {
|
|
inspection_mode = "deep"
|
|
}
|
|
|
|
# browser_isolation = {
|
|
# non_identity_enabled = true
|
|
# url_browser_isolation_enabled = true
|
|
# }
|
|
|
|
# CORRECTIF : tls_decrypt exige un certificat désigné. On lie le
|
|
# certificat Gateway géré par Terraform
|
|
# (Traffic_Policies-Traffic_Settings-Certificates.tf) — sans ce bloc,
|
|
# l'API refuse la configuration (erreur 2211 "TLS decryption cannot be
|
|
# enabled without a certificate").
|
|
certificate = {
|
|
id = cloudflare_zero_trust_gateway_certificate.zero_trust_gateway_certificate.id
|
|
}
|
|
|
|
extended_email_matching = {
|
|
enabled = true
|
|
}
|
|
|
|
fips = {
|
|
tls = true
|
|
}
|
|
|
|
host_selector = {
|
|
enabled = false
|
|
}
|
|
|
|
inspection = {
|
|
mode = "static"
|
|
}
|
|
|
|
protocol_detection = {
|
|
enabled = true
|
|
}
|
|
|
|
# sandbox = {
|
|
# enabled = true
|
|
# fallback_action = "allow"
|
|
# }
|
|
|
|
tls_decrypt = {
|
|
enabled = true
|
|
}
|
|
}
|
|
} |