coffeeordeath/orchestration.clouds
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Whitespace updates

Browse Source
This commit is contained in:
Alexander Hosking 2022-08-16 01:41:51 -04:00
parent a3b8b89a3b
commit b13c0abc15
1 changed files with 20 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

35
ahoskingit/terraform/cloudflare_access.tf
View File

@ -1,6 +1,6 @@
resource "cloudflare_access_group" "family" {
account_id = var.CLOUDFLARE_ACCOUNT_ID
name = "family group"
name = "family group"
include {
email_domain = ["@ahosking.com"]
@ -13,7 +13,7 @@ resource "cloudflare_access_application" "influx" {
domain = "influx.ahoskingit.com"
type = "self_hosted"
session_duration = "168h"
logo_url = "https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Fupload.wikimedia.org%2Fwikipedia%2Fcommons%2Fthumb%2Fc%2Fc6%2FInfluxdb_logo.svg%2F1920px-Influxdb_logo.svg"
logo_url = "https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Fupload.wikimedia.org%2Fwikipedia%2Fcommons%2Fthumb%2Fc%2Fc6%2FInfluxdb_logo.svg%2F1920px-Influxdb_logo.svg"
allowed_idps = [
"f27ba272-b676-4ab0-b560-e4ea52b19f18", #TODO: Remove Manual Entry
"ba68cb89-c20b-49ab-8aea-26b3af318196", #TODO: Remove Manual Entry
@ -33,10 +33,13 @@ resource "cloudflare_access_application" "money" {
resource "cloudflare_access_policy" "money" {
application_id = cloudflare_access_application.money.id
zone_id = cloudflare_zone.ahosking_com.id
name = "family"
precedence = "1"
decision = "allow"
zone_id = cloudflare_zone.ahosking_com.id
name = "family"
precedence = "1"
decision = "allow"
http_only_cookie_attribute = true
include {
email_domain = ["@ahosking.com"]
}
@ -67,23 +70,25 @@ resource "cloudflare_access_application" "tv" {
]
}
resource "cloudflare_access_application" "period" {
resource "cloudflare_access_application" "cycles" {
account_id = var.CLOUDFLARE_ACCOUNT_ID
name = "period"
domain = "period.ahosking.com"
name = "cycles"
domain = "cycles.ahosking.com"
type = "self_hosted"
session_duration = "336h"
allowed_idps = [
"f27ba272-b676-4ab0-b560-e4ea52b19f18", #TODO: Remove Manual Entry
]
http_only_cookie_attribute = true
}
resource "cloudflare_access_policy" "period" {
application_id = cloudflare_access_application.period.id
zone_id = cloudflare_zone.ahosking_com.id
name = "family"
precedence = "1"
decision = "allow"
resource "cloudflare_access_policy" "cycles" {
application_id = cloudflare_access_application.cycles.id
zone_id = cloudflare_zone.ahosking_com.id
name = "family"
precedence = "1"
decision = "allow"
include {
email_domain = ["@ahosking.com"]
}