Skip to content

Commit 82f147b

Browse files
committed
add default profile settings
1 parent df71d1a commit 82f147b

File tree

1 file changed

+30
-1
lines changed

1 file changed

+30
-1
lines changed

src/content/partials/learning-paths/zero-trust/device-profiles.mdx

Lines changed: 30 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -80,7 +80,36 @@ https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/devices/settings \
8080
}'
8181
```
8282

83-
</TabItem> </Tabs>
83+
</TabItem>
84+
<TabItem label="Terraform (v5)">
85+
86+
1. Add the following permission to your [`cloudflare_api_token`](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/api_token):
87+
- `Zero Trust Write`
88+
89+
2. Configure the default profile using the [`cloudflare_zero_trust_device_default_profile`](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/zero_trust_device_default_profile) resource:
90+
91+
```tf
92+
resource "cloudflare_zero_trust_device_default_profile" "default_profile" {
93+
account_id = var.cloudflare_account_id
94+
allow_mode_switch = false
95+
allow_updates = false
96+
allowed_to_leave = false
97+
auto_connect = 600
98+
captive_portal = 180
99+
disable_auto_fallback = true
100+
exclude_office_ips = false
101+
service_mode_v2 = {mode = "warp"}
102+
support_url = "https://support.example.com"
103+
switch_locked = true
104+
tunnel_protocol = "wireguard"
105+
}
106+
```
107+
108+
3. Configure global WARP settings:
109+
110+
111+
</TabItem>
112+
</Tabs>
84113

85114
## (Optional) Create an office profile
86115

0 commit comments

Comments
 (0)