terraform {
  required_version = ">= 1.5"

  required_providers {
    cloudflare = {
      source  = "cloudflare/cloudflare"
      version = "~> 4.40"
    }
  }
}

# The API token is read from the CLOUDFLARE_API_TOKEN environment variable.
# NEVER hardcode the token here or in any *.tfvars file (doc/06 §2 红线).
provider "cloudflare" {}