Skip to content

Commit

Permalink
finailise
Browse files Browse the repository at this point in the history
  • Loading branch information
michaelgardner87 committed Jan 24, 2024
1 parent be6ee13 commit 5810d40
Show file tree
Hide file tree
Showing 3 changed files with 6 additions and 36 deletions.
6 changes: 6 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -23,3 +23,9 @@ This module creates the following cloudflare WAF managed ruleset:
(Higher paranoia levels activate more aggressive rules)
- OWASP Action (Required)
- Managed Challenge

### IMPORTANT

- Order of the rules under the ruleset will set the priority/order

- Any existing managed rules need to be deleted in the dashboard and recreated in terraform
9 changes: 0 additions & 9 deletions main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -8,15 +8,6 @@ data "cloudflare_zones" "zones" {
}
}

#resource "cloudflare_ruleset" "zone_level_managed_ruleset" {
# count = length(var.domains)
#
# zone_id = lookup(data.cloudflare_zones.zones[count.index].zones[0], "id")
# name = "Cloudflare Managed Ruleset"
# kind = "managed"
# phase = "http_request_firewall_managed"
#}

resource "cloudflare_ruleset" "zone_level_managed_waf" {
count = length(var.domains)

Expand Down
27 changes: 0 additions & 27 deletions variables.tf
Original file line number Diff line number Diff line change
Expand Up @@ -3,30 +3,3 @@ variable "domains" {
description = "Cloudflare Domain to be applied to"
default = []
}

#variable "cloudflare_managed_ruleset" {
# type = object({
# enabled = bool
# expression = string
# # override = bool
# })
# default = {
# enabled = true
# expression = ""
# # override = false
# }
#}
#
#variable "cloudflare_owasp_core_ruleset" {
# type = object({
# enabled = bool
# expression = string
# # override = bool
# })
# default = {
# enabled = true
# expression = ""
# # override = false
# }
#
#}

0 comments on commit 5810d40

Please sign in to comment.