Merge pull request #7 from m4xmorris/split-policies

Split GitHub and Email policies

main.tf

@@ -10,18 +10,12 @@ resource "cloudflare_access_application" "application" {
   auto_redirect_to_identity = false
 }
 
-resource "cloudflare_access_policy" "policy" {
+resource "cloudflare_access_policy" "github_policy" {
   application_id = cloudflare_access_application.application.id
   zone_id        = var.cloudflare_zone_id
-  name           = "Allow Policy"
+  name           = "${var.name} GitHub Policy"
   precedence     = "1"
   decision       = "allow"
-  dynamic "include" {
-    for_each = var.allowed_emails
-    content {
-      email = [include.value]
-    }
-  }
   include {
     github {
       name                 = var.github_org
@@ -30,3 +24,15 @@ resource "cloudflare_access_policy" "policy" {
     }
   }
 }
+
+resource "cloudflare_access_policy" "email_policy" {
+  application_id = cloudflare_access_application.application.id
+  zone_id        = var.cloudflare_zone_id
+  name           = "${var.name} Email Policy"
+  precedence     = "2"
+  decision       = "allow"
+  include {
+    email = var.allowed_emails
+  }
+  count = length(var.allowed_emails) == 0 ? 0 : 1
+}