Terraform for Cloudflare Firewall Rule

main.tf

provider "cloudflare" {
  version   = "~> 2.7"
  api_token = "TOKEN"
}

data "cloudflare_zones" "wordpress" {
  filter {
    name   = "wahlnetwork.com"
    status = "active"
    paused = false
  }
}

resource "cloudflare_filter" "wordpress" {
  zone_id     = data.cloudflare_zones.wordpress.zones[0].id
  description = "Block wp-admin by IP"
  expression  = "(not ip.src in {PUBLIC_IP_ADDRESS} and http.request.uri.path contains \"/wp-admin\")"
}

resource "cloudflare_firewall_rule" "wordpress" {
  zone_id     = data.cloudflare_zones.wordpress.zones[0].id
  description = cloudflare_filter.wordpress.description
  filter_id   = cloudflare_filter.wordpress.id
  action      = "block"
}