feat: Prefixed SSH resources (#29)

lholota · web-flow · commit cc9dba7a041b · 2024-11-06T16:03:19.000+01:00
diff --git a/environments/vars.tfvars b/environments/vars.tfvars
@@ -92,6 +92,24 @@ cloudflare_apps = [
     allow_non_admins    = true,
     allow_service_token = false
   },
+  {
+    subdomain           = "pve1"
+    display_name        = "Proxmox VE (Node 1)"
+    allow_non_admins    = false,
+    allow_service_token = true
+  },
+  {
+    subdomain           = "pve2"
+    display_name        = "Proxmox VE (Node 2)"
+    allow_non_admins    = false,
+    allow_service_token = true
+  },
+  {
+    subdomain           = "pve3"
+    display_name        = "Proxmox VE (Node 3)"
+    allow_non_admins    = false,
+    allow_service_token = true
+  },
   {
     subdomain           = "pve"
     display_name        = "Proxmox VE"
diff --git a/terraform/cloudflare-ssh.tf b/terraform/cloudflare-ssh.tf
@@ -1,20 +1,20 @@
-resource "cloudflare_record" "ssh" {
+resource "cloudflare_record" "ssh_prefixed" {
   for_each = { for each in var.cloudflare_ssh_hosts : each.hostname => each }
 
   zone_id = sensitive(data.sops_file.secrets.data["cloudflare_zone_id"])
-  name    = "${each.key}.${var.cloudflare_apps_root_domain}"
+  name    = "ssh-${each.key}.${var.cloudflare_apps_root_domain}"
   type    = "CNAME"
   value   = cloudflare_tunnel.default.cname
   ttl     = 1
   proxied = true
 }
 
-resource "cloudflare_access_application" "ssh" {
+resource "cloudflare_access_application" "ssh_prefixed" {
   for_each = { for each in var.cloudflare_ssh_hosts : each.hostname => each }
 
   account_id                = sensitive(data.sops_file.secrets.data["cloudflare_account_id"])
   name                      = "SSH / ${each.key}.${var.cloudflare_apps_root_domain}"
-  domain                    = "${each.key}.${var.cloudflare_apps_root_domain}"
+  domain                    = "ssh-${each.key}.${var.cloudflare_apps_root_domain}"
   type                      = "self_hosted"
   session_duration          = "24h"
   auto_redirect_to_identity = true
