Update waf.tf

mchestr · Jun 5, 2024 · a096a04 · a096a04
1 parent 720e72e
commit a096a04
Showing 1 changed file with 7 additions and 7 deletions.
diff --git a/terraform/cloudflare/waf.tf b/terraform/cloudflare/waf.tf
@@ -2,14 +2,14 @@
 resource "cloudflare_filter" "block_countries" {
   zone_id     = data.cloudflare_zone.domain.id
   description = "Expression to block countries"
-  expression  = "(not ip.geoip.country in {\"CA\" \"US\" \"CN\" \"IT\" \"CH\" \"NL\"})"
+  expression  = "(not ip.geoip.country in {\"CA\" \"US\" \"CN\"})"
+}
+resource "cloudflare_firewall_rule" "block_countries" {
+  zone_id     = data.cloudflare_zone.domain.id
+  description = "Firewall rule to block countries"
+  filter_id   = cloudflare_filter.block_countries.id
+  action      = "block"
 }
-#resource "cloudflare_firewall_rule" "block_countries" {
-#  zone_id     = data.cloudflare_zone.domain.id
-#  description = "Firewall rule to block countries"
-#  filter_id   = cloudflare_filter.block_countries.id
-#  action      = "block"
-#}
 
 # Block Bots
 resource "cloudflare_filter" "bots" {