From 233dbfbdfd6d3b5e7e67ec13ee6fbf83f55a7c75 Mon Sep 17 00:00:00 2001 From: pat-s Date: Thu, 28 May 2026 15:53:26 +0200 Subject: [PATCH] refactor: hoist CDN block_ips to a variable block_ips was hardcoded in both pullzones as a single IP ("185.172.53.0"). Move it to a variable so updates don't require editing the resource bodies (and so a future for_each refactor doesn't bake the list into the map). Default keeps the existing entry; no plan diff on apply. --- cdn.tf | 8 ++------ vars.tf | 8 ++++++++ 2 files changed, 10 insertions(+), 6 deletions(-) diff --git a/cdn.tf b/cdn.tf index ea1ab2a..c41fdb4 100644 --- a/cdn.tf +++ b/cdn.tf @@ -32,9 +32,7 @@ resource "bunnynet_pullzone" "devxy-r-binaries" { cache_stale = ["offline", "updating"] use_background_update = true - block_ips = [ - "185.172.53.0" - ] + block_ips = var.cdn_block_ips # 50 TB limit_bandwidth = 50000000000000 @@ -86,9 +84,7 @@ resource "bunnynet_pullzone" "cran_rpkgs_com" { cache_stale = ["offline", "updating"] use_background_update = true - block_ips = [ - "185.172.53.0" - ] + block_ips = var.cdn_block_ips # 50 TB limit_bandwidth = 50000000000000 diff --git a/vars.tf b/vars.tf index aad56ff..b831269 100644 --- a/vars.tf +++ b/vars.tf @@ -17,3 +17,11 @@ variable "B2_S3_SECRET_KEY" { type = string sensitive = true } + +variable "cdn_block_ips" { + description = "IP addresses to block at the BunnyCDN pullzones (cran.devxy.io, cran.rpkgs.com)." + type = list(string) + default = [ + "185.172.53.0", + ] +}