First commit; Cloudflare configs for now.
This commit is contained in:
@@ -0,0 +1,64 @@
|
||||
resource "cloudflare_zone_settings_override" "terraform_managed_resource_17dbb71212204583b777783d25eb6738" {
|
||||
zone_id = var.cloudflare_zone_id
|
||||
settings {
|
||||
always_online = "on"
|
||||
always_use_https = "on"
|
||||
automatic_https_rewrites = "on"
|
||||
brotli = "on"
|
||||
browser_cache_ttl = 14400
|
||||
browser_check = "on"
|
||||
cache_level = "aggressive"
|
||||
challenge_ttl = 1800
|
||||
cname_flattening = "flatten_at_root"
|
||||
development_mode = "off"
|
||||
early_hints = "on"
|
||||
email_obfuscation = "on"
|
||||
filter_logs_to_cloudflare = "off"
|
||||
hotlink_protection = "on"
|
||||
http2 = "on"
|
||||
http3 = "on"
|
||||
ip_geolocation = "on"
|
||||
ipv6 = "on"
|
||||
log_to_cloudflare = "on"
|
||||
max_upload = 100
|
||||
min_tls_version = "1.0"
|
||||
minify {
|
||||
css = "off"
|
||||
html = "off"
|
||||
js = "off"
|
||||
}
|
||||
mirage = "off"
|
||||
opportunistic_encryption = "on"
|
||||
opportunistic_onion = "on"
|
||||
orange_to_orange = "off"
|
||||
origin_error_page_pass_thru = "off"
|
||||
polish = "off"
|
||||
prefetch_preload = "off"
|
||||
privacy_pass = "on"
|
||||
proxy_read_timeout = "100"
|
||||
pseudo_ipv4 = "off"
|
||||
replace_insecure_js = "on"
|
||||
response_buffering = "off"
|
||||
rocket_loader = "on"
|
||||
security_header {
|
||||
enabled = false
|
||||
include_subdomains = false
|
||||
max_age = 0
|
||||
nosniff = false
|
||||
preload = false
|
||||
}
|
||||
security_level = "medium"
|
||||
server_side_exclude = "off"
|
||||
sort_query_string_for_cache = "off"
|
||||
ssl = "full"
|
||||
tls_1_3 = "on"
|
||||
tls_client_auth = "off"
|
||||
true_client_ip_header = "off"
|
||||
visitor_ip = "on"
|
||||
waf = "off"
|
||||
webp = "off"
|
||||
websockets = "on"
|
||||
zero_rtt = "off"
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user