zone
alex-feel/zone/cloudflare
Terraform Module
HCL
CLOUDFLARE
Terraform module that creates zone resources in Cloudflare with minimal effort on your part.
Install
module "zone" {
source = "alex-feel/zone/cloudflare"
version = "1.9.0"
}
README
Cloudflare Zone Terraform Module    Terraform module that creates zone resources in Cloudflare with minimal effort on your part. The main goals of this module are to simplify the creation of resources in Cloudflare, while reducing the number of possible user mistakes at the earliest possible stage. See notes below for more information. Requirements | Name | Version | |------|---------| | terraform | >= 1.3.0 | | cloudflare | >= 3.26.0 | Supported Resources These types of resources are supported: Cloudflare page rule Cloudflare record Cloudflare Zone Cloudflare Zone D
Inputs (50)
| Name | Type | Description | Default |
|---|---|---|---|
| account_id | string | Account ID to manage the zone resource in. | |
| records | list(object({ record_name | Zone's DNS records. Available on the following plans: "free", "partners_free", " | [] |
| always_use_https | string | Reply to all requests for URLs that use 'http' with a 301 redirect to the equiva | "off" |
| ip_geolocation | string | Enable IP Geolocation to have Cloudflare geolocate visitors to your website and | "on" |
| response_buffering | string | Enables or disables buffering of responses from the proxied server. Cloudflare m | "off" |
| true_client_ip_header | string | Allows customer to continue to use True Client IP (Akamai feature) in the header | "off" |
| pseudo_ipv4 | string | Pseudo IPv4 setting. Available on the following plans: "pro", "partners_pro", "b | "off" |
| enable_dnssec | bool | Enable or disable DNSSEC. Available on the following plans: "free", "partners_fr | false |
| opportunistic_onion | string | Add an Alt-Svc header to all legitimate requests from Tor, allowing the connecti | "off" |
| universal_ssl | string | Disabling Universal SSL removes any currently active Universal SSL certificates | "on" |
| tls_1_3 | string | Enable Crypto TLS 1.3 feature for this zone. Available on the following plans: " | "off" |
| minify | object({ css = optional(s | Automatically minify certain assets for your website. Available on the following | {
"css": "off",
"html": "off",
"js |
| paused | bool | Indicates if the zone is only using Cloudflare DNS services. A true value means | false |
| websockets | string | WebSockets are open connections sustained between the client and the origin serv | "off" |
| page_rules | list(object({ page_rule_na | Zone's page rules. Number of allowed page rules depending on the plan: "free": 3 | [] |
| polish | string | Strips metadata and compresses your images for faster page load times. Basic (Lo | "off" |
| challenge_ttl | number | Specify how long a visitor is allowed access to your site after successfully com | 1800 |
| plan | string | The desired plan for the zone. Can be updated once the one is created. Changing | "free" |
| development_mode | string | Development Mode temporarily allows you to enter development mode for your websi | "off" |
| cache_level | string | Cache Level functions based off the setting level. The basic setting will cache | "aggressive" |
| image_resizing | string | Image Resizing provides on-demand resizing, conversion and optimisation for imag | "off" |
| … and 10 more inputs | |||
Outputs (32)
zone_id — The zone ID.name_servers — Cloudflare-assigned name servers. This is only populated for zones that use Cloudflare DNS.dnssec_status — The status of the Zone DNSSEC.algorithm — Zone DNSSEC algorithm.record_hostnames — The FQDN of the records.page_rule_actions — The actions applied by the page rules.initial_settings — Settings present in the zone at the time the resource is created. This will be used to restore the oinitial_settings_read_at — Time when this resource was created and the initial_settings were set.record_proxiable — Shows whether these records can be proxied, must be true if setting proxied=true.record_metadata — A key-value map of string metadata Cloudflare associates with the records.page_rule_priorities — The priority of the page rules.key_tag — Key Tag for the Zone DNSSEC.status — Status of the zone. Valid values: active, pending, initializing, moved, deleted, deactivated.readonly_settings — Which of the current settings are not able to be set by the user. Which settings these are is determkey_type — Key type used for Zone DNSSEC.ds — DS for the Zone DNSSEC.modified_on — Zone DNSSEC updated time.page_rule_statuses — Whether the page rules are active or disabled.vanity_name_servers — List of Vanity Nameservers (if set).zone_type — A full zone implies that DNS is hosted with Cloudflare. A partial zone is typically a partner-hostedpublic_key — Public Key for the Zone DNSSEC.page_rule_targets — The URL pattern targeted by the page rules.verification_key — Contains the TXT record value to validate domain ownership. This is only populated for zones of typeflags — Zone DNSSEC flags.digest_type — Digest Type for Zone DNSSEC.record_modified_on — The RFC3339 timestamp of when the records were last modified.meta — Map of booleans, indicating some zone statuses or flags.record_ids — The record IDs.record_created_on — The RFC3339 timestamp of when the records were created.digest_algorithm — Digest algorithm use for Zone DNSSEC.… and 2 more outputs
Resources (5)
cloudflare_page_rulecloudflare_recordcloudflare_zonecloudflare_zone_dnsseccloudflare_zone_settings_override
Details
FrameworkTerraform Module
LanguageHCL
Version1.9.0
Cloud CLOUDFLARE
★ Stars15
Forks5
Total downloads3.2k
Inputs50
Outputs32
Resources5
Examples5
LicenseGPL-3.0
Namespacealex-feel
Updated
Similar packages
caf-enterprise-scale
Azure landing zones Terraform module
★ 952terraform
caf
Terraform supermodule for the Terraform platform engineering for Azure
★ 581terraform
lz-vending
Terraform module to deploy landing zone subscriptions (and much more) in Azure
★ 210terraform-module
label
Terraform Module to define a consistent naming convention by (namespace, stage,
★ 702terraform