michael/IaC
1
0
Fork 0
Code Packages

Cloudflare DNS via TF

Browse Source
This commit is contained in:
= 2024-10-24 18:39:30 +13:00
parent fe38bebbd5
commit 14fc10a10a
3 changed files with 68 additions and 25 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
terraform/cloudflare/main.tf
View File

@ -8,7 +8,7 @@ terraform {
} }
} }
backend "local" { backend "local" {
path = "/home/michael/Nextcloud/Backups/tfstate/cloudflare.tfstate" path = pathexpand("~/Backups/tfstate/cloudflare.tfstate")
} }
} }
@ -16,27 +16,40 @@ provider "cloudflare" {
api_token = var.api_token api_token = var.api_token
} }
data "cloudflare_accounts" "default" { data "cloudflare_accounts" "default" {}
name = var.account_name
} # output "accounts" {
# value = data.cloudflare_accounts.default.accounts[0]
# }
resource "cloudflare_zone" "balsillie_net" { resource "cloudflare_zone" "balsillie_net" {
account_id = data.cloudflare_accounts.default[0].id account_id = data.cloudflare_accounts.default.accounts[0].id
zone = "balsillie.net" zone = "balsillie.net"
paused = false paused = false
plan = "free" plan = "free"
type = "full" type = "full"
} }
resource "cloudflare_dns_zone_dnssec" "balsillie_net" { resource "cloudflare_zone_dnssec" "balsillie_net" {
zone_id = cloudflare_zone.balsillie_net.id zone_id = cloudflare_zone.balsillie_net.id
} }
resource "cloudflare_dns_record" "example_record" { resource "cloudflare_record" "a_records" {
for_each = var.a_records
zone_id = cloudflare_zone.balsillie_net.id zone_id = cloudflare_zone.balsillie_net.id
proxied = false proxied = false
type = "A" type = "A"
ttl = 60 ttl = 60
name = "@" name = each.key
content = "5.161.254.39" content = each.value
}
resource "cloudflare_record" "cname_records" {
for_each = var.cname_records
zone_id = cloudflare_zone.balsillie_net.id
proxied = false
type = "CNAME"
ttl = 60
name = each.key
content = each.value
} }

25
terraform/cloudflare/variable_definitions.tf
View File

@ -5,17 +5,20 @@ variable "api_token" {
sensitive = true sensitive = true
} }
variable "account_name" {
description = "Cloudflare account name"
type = string
default = ""
}
variable "a_records" { variable "a_records" {
description = "DNS A records to create" description = "DNS A records to create"
type = list(object({ type = map(string)
name = string default = {}
content = string }
}))
default = [] variable "cname_records" {
description = "DNS CNAME records to create"
type = map(string)
default = {}
}
variable "root_records" {
description = "Special root records to create with name @"
type = map(string)
default = {}
} }

37
terraform/cloudflare/variables.auto.tfvars
View File

@ -1,6 +1,33 @@
account_name = "balsillie" root_records = {
a = "5.161.254.39",
}
a_records = [ a_records = {
{name = "@", content = ""}, www = "5.161.254.39"
{name = "www", content = ""} cloud = "5.161.254.39"
] cloud = "5.161.254.39"
hetzner = "5.161.254.39"
imap = "5.161.254.39"
sieve = "5.161.254.39"
smtp = "5.161.254.39"
}
cname_records = {
auth = "hetzner"
autoconfig = "hetzner"
autodiscover = "hetzner"
code = "hetzner"
discord-bridge = "hetzner"
im = "hetzner"
matrix = "hetzner"
matrix-auth = "hetzner"
matrix-federation = "hetzner"
matrix-sync = "hetzner"
mta-sts = "hetzner"
notify = "hetzner"
office = "hetzner"
signal-bridge = "hetzner"
social = "hetzner"
turn = "hetzner"
whatsapp-bridge = "hetzner"
}