viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix CF ruleset import id + depends_on #4

Merged
viktor merged 1 commit from wizard/crowdsec-fix2 into master 2026-06-20 19:13:04 +00:00
Conversation 0 Commits 1 Files changed 1 +5 -1
1 changed files with 5 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

6
stacks/rybbit/crowdsec_edge.tf
View file

@ -107,7 +107,7 @@ resource "cloudflare_list" "crowdsec_captcha" {
# (currently disabled) skip rule preserved verbatim below it.
import {
to = cloudflare_ruleset.crowdsec
id = "fd2c5dd4efe8fe38958944e74d0ced6d/106a1342bc88454ea59c47ad3431fe0e"
id = "zone/fd2c5dd4efe8fe38958944e74d0ced6d/106a1342bc88454ea59c47ad3431fe0e"
}
resource "cloudflare_ruleset" "crowdsec" {
@ -116,6 +116,10 @@ resource "cloudflare_ruleset" "crowdsec" {
kind = "zone"
phase = "http_request_firewall_custom"
# The WAF rules reference the IP lists by name ($crowdsec_ban / $crowdsec_captcha),
# so the lists must exist before this ruleset is created/updated.
depends_on = [cloudflare_list.crowdsec_ban, cloudflare_list.crowdsec_captcha]
# CrowdSec ban — evaluated FIRST so a banned IP is blocked before anything else.
rules {
action = "block"