117 lines
3.6 KiB
HCL
117 lines
3.6 KiB
HCL
# =============================================================================
|
|
# CLOUDFLARE : Team & Resources : Devices : Device profiles
|
|
# =============================================================================
|
|
|
|
#
|
|
resource "cloudflare_zero_trust_device_custom_profile" "zero_trust_device_custom_profile_windows" {
|
|
account_id = local.cloudflare_account_id
|
|
|
|
enabled = true
|
|
name = "Allow devices Windows"
|
|
description = "Policy for test teams."
|
|
precedence = 100
|
|
# match = "identity.email == \"test@cloudflare.com\""
|
|
match = "os.name == \"windows\""
|
|
allow_mode_switch = true
|
|
allow_updates = true
|
|
allowed_to_leave = true
|
|
auto_connect = 0
|
|
captive_portal = 180
|
|
disable_auto_fallback = true
|
|
# exclude = [{
|
|
# address = "192.0.2.0/24"
|
|
# description = "Exclude testing domains from the tunnel"
|
|
# }]
|
|
exclude_office_ips = true
|
|
# include = [{
|
|
# address = "192.0.2.0/24"
|
|
# description = "Include testing domains in the tunnel"
|
|
# }]
|
|
lan_allow_minutes = 30
|
|
lan_allow_subnet_size = 24
|
|
register_interface_ip_with_dns = true
|
|
sccm_vpn_boundary_support = false
|
|
service_mode_v2 = {
|
|
mode = "proxy"
|
|
port = 3000
|
|
}
|
|
support_url = "https://1.1.1.1/help"
|
|
switch_locked = true
|
|
tunnel_protocol = "wireguard"
|
|
}
|
|
|
|
#
|
|
resource "cloudflare_zero_trust_device_custom_profile" "zero_trust_device_custom_profile_linux" {
|
|
account_id = local.cloudflare_account_id
|
|
|
|
enabled = true
|
|
name = "Allow devices Linux"
|
|
description = "Policy for test teams."
|
|
precedence = 200
|
|
# match = "identity.email == \"test@cloudflare.com\""
|
|
match = "os.name == \"linux\""
|
|
allow_mode_switch = true
|
|
allow_updates = true
|
|
allowed_to_leave = true
|
|
auto_connect = 0
|
|
captive_portal = 180
|
|
disable_auto_fallback = true
|
|
# exclude = [{
|
|
# address = "192.0.2.0/24"
|
|
# description = "Exclude testing domains from the tunnel"
|
|
# }]
|
|
exclude_office_ips = true
|
|
# include = [{
|
|
# address = "192.0.2.0/24"
|
|
# description = "Include testing domains in the tunnel"
|
|
# }]
|
|
lan_allow_minutes = 30
|
|
lan_allow_subnet_size = 24
|
|
register_interface_ip_with_dns = true
|
|
sccm_vpn_boundary_support = false
|
|
service_mode_v2 = {
|
|
mode = "proxy"
|
|
port = 3000
|
|
}
|
|
support_url = "https://1.1.1.1/help"
|
|
switch_locked = true
|
|
tunnel_protocol = "wireguard"
|
|
}
|
|
|
|
#
|
|
resource "cloudflare_zero_trust_device_custom_profile" "zero_trust_device_custom_profile_mac" {
|
|
account_id = local.cloudflare_account_id
|
|
|
|
enabled = true
|
|
name = "Allow devices Mac"
|
|
description = "Policy for test teams."
|
|
precedence = 300
|
|
# match = "identity.email == \"test@cloudflare.com\""
|
|
match = "os.name == \"mac\""
|
|
allow_mode_switch = true
|
|
allow_updates = true
|
|
allowed_to_leave = true
|
|
auto_connect = 0
|
|
captive_portal = 180
|
|
disable_auto_fallback = true
|
|
# exclude = [{
|
|
# address = "192.0.2.0/24"
|
|
# description = "Exclude testing domains from the tunnel"
|
|
# }]
|
|
exclude_office_ips = true
|
|
# include = [{
|
|
# address = "192.0.2.0/24"
|
|
# description = "Include testing domains in the tunnel"
|
|
# }]
|
|
lan_allow_minutes = 30
|
|
lan_allow_subnet_size = 24
|
|
register_interface_ip_with_dns = true
|
|
sccm_vpn_boundary_support = false
|
|
service_mode_v2 = {
|
|
mode = "proxy"
|
|
port = 3000
|
|
}
|
|
support_url = "https://1.1.1.1/help"
|
|
switch_locked = true
|
|
tunnel_protocol = "wireguard"
|
|
} |