File tree Expand file tree Collapse file tree 2 files changed +6
-3
lines changed
Expand file tree Collapse file tree 2 files changed +6
-3
lines changed Original file line number Diff line number Diff line change @@ -24,18 +24,21 @@ provider "cloudflare" {
2424# Fetches the latest Cloudflare IPs automatically via API
2525data "cloudflare_ip_ranges" "cloudflare" {}
2626
27- resource "cloudflare_record " "vm_dns" {
27+ resource "cloudflare_dns_record " "vm_dns" {
2828 zone_id = var. cloudflare_zone_id
2929 name = " resources.200630.xyz" # Root domain
3030 content = azurerm_public_ip. vm_public_ip . ip_address
3131 type = " A"
32+ ttl = 3600
3233 proxied = true # Enables the Orange Cloud (SSL & IP Hiding)
34+
3335}
3436
35- resource "cloudflare_record " "vm_ssh_dns" {
37+ resource "cloudflare_dns_record " "vm_ssh_dns" {
3638 zone_id = var. cloudflare_zone_id
3739 name = " ssh-access.200630.xyz"
3840 content = azurerm_public_ip. vm_public_ip . ip_address
3941 type = " A"
42+ ttl = 3600
4043 proxied = false # This allows non-HTTP traffic like SSH to pass
4144}
Original file line number Diff line number Diff line change @@ -121,7 +121,7 @@ resource "azurerm_network_security_rule" "allow_cloudflare_only" {
121121 protocol = " Tcp"
122122 source_port_range = " *"
123123 destination_port_ranges = [" 443" ]
124- source_address_prefixes = data. cloudflare_ip_ranges . cloudflare . ipv4_cidr_blocks
124+ source_address_prefixes = data. cloudflare_ip_ranges . cloudflare . ipv4_cidrs
125125 destination_address_prefix = " *"
126126 resource_group_name = azurerm_resource_group. vm_rg . name
127127 network_security_group_name = azurerm_network_security_group. vm_nsg . name
You can’t perform that action at this time.
0 commit comments