set some defaults, blacklist IPs

848de25a · Mike Horwath · 3dc760ef · 848de25a · 848de25a
Commit 848de25a authored Nov 10, 2018 by Mike Horwath
Hide whitespace changes
Inline Side-by-side

Showing with 20 additions and 3 deletions

rule.tf rule.tf +13 -2

variables.tf variables.tf +7 -1

No files found.
--- a/rule.tf
+++ b/rule.tf
-# TBD
-
+# whitelist an IP
 resource "cloudflare_access_rule" "whitelisted_ip" {
  count = "${length(var.whitelist_ips)}"
  notes = "${var.notes}"
@@ -10,3 +9,15 @@ resource "cloudflare_access_rule" "whitelisted_ip" {
    value  = "${element(var.whitelist_ips, count.index)}"
  }
 }
+
+# blacklist an IP
+resource "cloudflare_access_rule" "blacklisted_ip" {
+  count = "${length(var.blacklist_ips)}"
+  notes = "${var.notes}"
+  mode  = "block"
+
+  configuration {
+    target = "ip_range"
+    value  = "${element(var.blacklist_ips, count.index)}"
+  }
+}
--- a/variables.tf
+++ b/variables.tf
@@ -5,5 +5,11 @@ variable "configuration_value" {}
 variable "zone" {}

 variable "whitelist_ips" {
-  type = "list"
+  type    = "list"
+  default = ""
+}
+
+variable "blacklist_ips" {
+  type    = "list"
+  default = ""
 }