enable gateway proxy

Author: ranbel

src/content/docs/learning-paths/replace-vpn/configure-device-agent/enable-proxy.mdx

@@ -12,6 +12,4 @@ import { Render } from "~/components"
 
 ## Enable the proxy
 
-<Render file="tunnel/enable-gateway-proxy" product="cloudflare-one" />
-
-Cloudflare will now proxy traffic from enrolled devices, except for the traffic excluded in your [split tunnel settings](/cloudflare-one/connections/connect-networks/private-net/cloudflared/#3-route-private-network-ips-through-warp). For more information on how Gateway forwards traffic, refer to [Gateway proxy](/cloudflare-one/policies/gateway/proxy/).
+<Render file="tunnel/enable-gateway-proxy" product="cloudflare-one" />

src/content/partials/cloudflare-one/tunnel/enable-gateway-proxy.mdx

@@ -15,7 +15,22 @@ import { Tabs, TabItem } from "~/components";
 </TabItem>
 <TabItem label="Terraform (v5)">
 
-Proxy settings are not currently supported by the Terraform v5 provider (as of version 5.3.0). To turn on the Gateway proxy, use the dashboard or API.
+:::note
+Requires Cloudflare provider version `>=5.6.0`.
+:::
+
+1. Add the following permission to your [`cloudflare_api_token`](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/api_token):
+	- `Zero Trust Write`
+
+2. Turn on the TCP and/or UDP proxy using the [`cloudflare_zero_trust_device_settings`](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/zero_trust_device_settings) resource:
+
+	```tf
+	resource "cloudflare_zero_trust_device_settings "global_warp_settings" {
+		account_id            = var.cloudflare_account_id
+	  gateway_proxy_enabled = true
+		gateway_udp_proxy_enabled = true
+	}
+	```
 
 </TabItem>
 </Tabs>