cloudflare/terraform/zone_settings.tf at main · the-hideout/cloudflare · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
locals {
  zone_settings = {
    always_online            = "on"
    always_use_https         = "on"
    automatic_https_rewrites = "on"
    brotli                   = "on"
    browser_check            = "on"
    http3                    = "on"
    ip_geolocation           = "on"
    ipv6                     = "on"
    opportunistic_encryption = "on"
    privacy_pass             = "on"
    rocket_loader            = "on"
    opportunistic_onion      = "on"
    websockets               = "on"
    zero_rtt                 = "on"
    webp                     = "on"

    security_level  = "medium"
    cache_level     = "aggressive"
    min_tls_version = "1.0"
    ssl             = "flexible"
    polish          = "lossy"

    browser_cache_ttl = 691200
    challenge_ttl     = 1800
    max_upload        = 100

    minify = {
      css  = "off"
      html = "off"
      js   = "off"
    }

    security_header = {
      strict_transport_security = {
        enabled            = true
        include_subdomains = true
        max_age            = 15552000
        nosniff            = true
        preload            = true
      }
    }
  }
}

resource "cloudflare_zone_setting" "settings" {
  for_each = local.zone_settings

  setting_id = each.key == "zero_rtt" ? "0rtt" : each.key
  value      = each.value
  zone_id    = var.CLOUDFLARE_ZONE_ID
}