# Copy to terraform.tfvars and fill in. terraform.tfvars is gitignored.
# NEVER put the API token or origin_auth_value in a committed file.
#
#   export CLOUDFLARE_API_TOKEN=...        # provider auth
#   export TF_VAR_origin_auth_value=...    # secret origin-auth header value

zone_id    = "__CF_ZONE_ID__"
account_id = "__CF_ACCOUNT_ID__"
origin_ip  = "__ORIGIN_IP__"

api_hostnames = [
  "api.example.com",
  "sub.example.com",
]

origin_auth_header = "X-Origin-Auth"

rate_limit_requests_per_minute = 120
rate_limit_mitigation_seconds  = 600
enable_bot_management          = true

# origin_auth_value is intentionally omitted here — set TF_VAR_origin_auth_value.