Skip to content

SVG maps CORS header#100

Merged
GrantBirki merged 8 commits intomainfrom
svg-cors
Mar 29, 2026
Merged

SVG maps CORS header#100
GrantBirki merged 8 commits intomainfrom
svg-cors

Conversation

@Razzmatazzz
Copy link
Copy Markdown
Member

No description provided.

@Razzmatazzz Razzmatazzz requested a review from a team as a code owner February 21, 2026 03:41
@github-actions
Copy link
Copy Markdown

👋 Thanks for opening a pull request!

If you are new, please check out the deployment process to understand how to deploy this pull request. A trimmed down summary will be listed below:

  1. 🧪 Run a noop deployment with .noop as a comment on this PR

  2. 👀 Observe the CI and noop output on this pull request to ensure it is passing and doing what it is supposed to do

  3. ✔️ Obtain an approval/review on this pull request

  4. 🚀 Branch deploy your pull request to production with .deploy

    If anything goes wrong, rollback with .deploy main

  5. 🎉 Merge!

@Razzmatazzz
Copy link
Copy Markdown
Member Author

.deploy

@github-actions
Copy link
Copy Markdown

Deployment Triggered 🚀

Razzmatazzz, started a branch deployment to production (branch: svg-cors)

You can watch the progress here 🔗

Details
{
  "type": "branch",
  "environment": {
    "name": "production",
    "url": null
  },
  "deployment": {
    "timestamp": "2026-02-21T03:44:22.197Z",
    "logs": "https://github.com/the-hideout/cloudflare/actions/runs/22249687933"
  },
  "git": {
    "branch": "svg-cors",
    "commit": "077fe1f1b25c0880b5b72b133dc5859a4eb4beb3",
    "verified": true,
    "committer": "web-flow",
    "html_url": "https://github.com/the-hideout/cloudflare/commit/077fe1f1b25c0880b5b72b133dc5859a4eb4beb3"
  },
  "context": {
    "actor": "Razzmatazzz",
    "noop": false,
    "fork": false,
    "comment": {
      "created_at": "2026-02-21T03:44:06Z",
      "updated_at": "2026-02-21T03:44:06Z",
      "body": ".deploy",
      "html_url": "https://github.com/the-hideout/cloudflare/pull/100#issuecomment-3938092844"
    }
  },
  "parameters": {
    "raw": null,
    "parsed": null
  }
}

@github-actions
Copy link
Copy Markdown

Deployment Results ✅

Razzmatazzz successfully branch deployed branch svg-cors to production

Show Results
Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply":

  # cloudflare_record.socket has changed
  ~ resource "cloudflare_record" "socket" {
        id              = "5fe2cfccd163bec91078f7c40ebd5fb2"
      ~ modified_on     = "2026-02-20T22:49:18.682451Z" -> "2026-02-20T23:21:27.669622Z"
        name            = "socket"
      ~ value           = "tarkov-socket-server-production.up.railway.app" -> "sxzwu785.up.railway.app"
        # (9 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # cloudflare_ruleset.security_response_headers will be updated in-place
  ~ resource "cloudflare_ruleset" "security_response_headers" {
        id          = "99896b7130154c279bd0dd1d94f109ec"
        name        = "Security Response Headers"
        # (4 unchanged attributes hidden)

      + rules {
          + action      = "rewrite"
          + description = "Add CORS header to SVG maps"
          + enabled     = true
          + expression  = "(starts_with(http.request.uri.path, \"https://assets.tarkov.dev/maps/svg/\"))"

          + action_parameters {

              + headers {
                  + name      = "Access-Control-Allow-Origin"
                  + operation = "set"
                  + value     = "*"
                }
            }
        }
        # (2 unchanged blocks hidden)
    }

  # cloudflare_zone_settings_override.tarkov_dev will be updated in-place
  ~ resource "cloudflare_zone_settings_override" "tarkov_dev" {
        id                       = "a17204c79af55fcf05e4975f66e2490e"
        # (6 unchanged attributes hidden)

      ~ settings {
            # (51 unchanged attributes hidden)

          ~ minify {
              ~ css  = "off" -> "on"
              ~ html = "off" -> "on"
              ~ js   = "off" -> "on"
            }

            # (2 unchanged blocks hidden)
        }
    }

Plan: 0 to add, 2 to change, 0 to destroy.
cloudflare_zone_settings_override.tarkov_dev: Modifying... [id=a17204c79af55fcf05e4975f66e2490e]
cloudflare_ruleset.security_response_headers: Modifying... [id=99896b7130154c279bd0dd1d94f109ec]
cloudflare_ruleset.security_response_headers: Modifications complete after 1s [id=99896b7130154c279bd0dd1d94f109ec]
cloudflare_zone_settings_override.tarkov_dev: Modifications complete after 2s [id=a17204c79af55fcf05e4975f66e2490e]

Apply complete! Resources: 0 added, 2 changed, 0 destroyed.

@Razzmatazzz Razzmatazzz changed the title Update transform_rules.tf SVG maps CORS header Feb 21, 2026
@Razzmatazzz
Copy link
Copy Markdown
Member Author

.deploy

@github-actions
Copy link
Copy Markdown

Deployment Triggered 🚀

Razzmatazzz, started a branch deployment to production (branch: svg-cors)

You can watch the progress here 🔗

Details
{
  "type": "branch",
  "environment": {
    "name": "production",
    "url": null
  },
  "deployment": {
    "timestamp": "2026-02-21T03:49:18.204Z",
    "logs": "https://github.com/the-hideout/cloudflare/actions/runs/22249758455"
  },
  "git": {
    "branch": "svg-cors",
    "commit": "d6b58da833266f420ebe46aa4a8819574ea12720",
    "verified": true,
    "committer": "web-flow",
    "html_url": "https://github.com/the-hideout/cloudflare/commit/d6b58da833266f420ebe46aa4a8819574ea12720"
  },
  "context": {
    "actor": "Razzmatazzz",
    "noop": false,
    "fork": false,
    "comment": {
      "created_at": "2026-02-21T03:49:06Z",
      "updated_at": "2026-02-21T03:49:06Z",
      "body": ".deploy",
      "html_url": "https://github.com/the-hideout/cloudflare/pull/100#issuecomment-3938099220"
    }
  },
  "parameters": {
    "raw": null,
    "parsed": null
  }
}

@github-actions
Copy link
Copy Markdown

Deployment Results ✅

Razzmatazzz successfully branch deployed branch svg-cors to production

Show Results
Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply":

  # cloudflare_ruleset.security_response_headers has changed
  ~ resource "cloudflare_ruleset" "security_response_headers" {
        id          = "99896b7130154c279bd0dd1d94f109ec"
        name        = "Security Response Headers"
        # (4 unchanged attributes hidden)

      ~ rules {
            id          = "94497193cf834699aa1c41aba17a765d"
            # (4 unchanged attributes hidden)

          ~ action_parameters {
              + cookie_fields              = []
              + phases                     = []
              + products                   = []
              + request_fields             = []
              + response_fields            = []
              + rules                      = {}
              + rulesets                   = []
                # (17 unchanged attributes hidden)

                # (1 unchanged block hidden)
            }
        }
        # (2 unchanged blocks hidden)
    }

Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # cloudflare_ruleset.security_response_headers will be updated in-place
  ~ resource "cloudflare_ruleset" "security_response_headers" {
        id          = "99896b7130154c279bd0dd1d94f109ec"
        name        = "Security Response Headers"
        # (4 unchanged attributes hidden)

      ~ rules {
          ~ expression  = "(starts_with(http.request.uri.path, \"https://assets.tarkov.dev/maps/svg/\"))" -> "(starts_with(http.request.full_uri, \"https://assets.tarkov.dev/maps/svg/\"))"
            id          = "94497193cf834699aa1c41aba17a765d"
            # (3 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
        # (2 unchanged blocks hidden)
    }

  # cloudflare_zone_settings_override.tarkov_dev will be updated in-place
  ~ resource "cloudflare_zone_settings_override" "tarkov_dev" {
        id                       = "a17204c79af55fcf05e4975f66e2490e"
        # (6 unchanged attributes hidden)

      ~ settings {
            # (51 unchanged attributes hidden)

          ~ minify {
              ~ css  = "off" -> "on"
              ~ html = "off" -> "on"
              ~ js   = "off" -> "on"
            }

            # (2 unchanged blocks hidden)
        }
    }

Plan: 0 to add, 2 to change, 0 to destroy.
cloudflare_zone_settings_override.tarkov_dev: Modifying... [id=a17204c79af55fcf05e4975f66e2490e]
cloudflare_ruleset.security_response_headers: Modifying... [id=99896b7130154c279bd0dd1d94f109ec]
cloudflare_ruleset.security_response_headers: Modifications complete after 2s [id=99896b7130154c279bd0dd1d94f109ec]
cloudflare_zone_settings_override.tarkov_dev: Modifications complete after 4s [id=a17204c79af55fcf05e4975f66e2490e]

Apply complete! Resources: 0 added, 2 changed, 0 destroyed.

Shebuka
Shebuka previously approved these changes Feb 22, 2026
@Razzmatazzz
Copy link
Copy Markdown
Member Author

.deploy

@github-actions
Copy link
Copy Markdown

Deployment Triggered 🚀

Razzmatazzz, started a branch deployment to production (branch: svg-cors)

You can watch the progress here 🔗

Details
{
  "type": "branch",
  "environment": {
    "name": "production",
    "url": null
  },
  "deployment": {
    "timestamp": "2026-02-23T13:49:08.500Z",
    "logs": "https://github.com/the-hideout/cloudflare/actions/runs/22308875174"
  },
  "git": {
    "branch": "svg-cors",
    "commit": "7a5f0aa66df3aeb8594895ef86cfc3def36f301f",
    "verified": true,
    "committer": "web-flow",
    "html_url": "https://github.com/the-hideout/cloudflare/commit/7a5f0aa66df3aeb8594895ef86cfc3def36f301f"
  },
  "context": {
    "actor": "Razzmatazzz",
    "noop": false,
    "fork": false,
    "comment": {
      "created_at": "2026-02-23T13:48:54Z",
      "updated_at": "2026-02-23T13:48:54Z",
      "body": ".deploy",
      "html_url": "https://github.com/the-hideout/cloudflare/pull/100#issuecomment-3944892226"
    }
  },
  "parameters": {
    "raw": null,
    "parsed": null
  }
}

@github-actions
Copy link
Copy Markdown

Deployment Results ❌

Razzmatazzz your branch deployment of svg-cors failed to deploy to the production environment

Show Results
Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply":

  # cloudflare_record.socket has been deleted
  - resource "cloudflare_record" "socket" {
      - allow_overwrite = false -> null
      - created_on      = "2024-08-22T11:42:13.8937Z" -> null
      - hostname        = "socket.tarkov.dev" -> null
      - id              = "5fe2cfccd163bec91078f7c40ebd5fb2" -> null
      - metadata        = {} -> null
      - modified_on     = "2026-02-20T23:21:27.669622Z" -> null
      - name            = "socket" -> null
      - proxiable       = true -> null
      - proxied         = true -> null
      - ttl             = 1 -> null
      - type            = "CNAME" -> null
      - value           = "sxzwu785.up.railway.app" -> null
      - zone_id         = "a17204c79af55fcf05e4975f66e2490e" -> null

      - timeouts {}
    }

Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  + create
  ~ update in-place

Terraform will perform the following actions:

  # cloudflare_record.socket will be created
  + resource "cloudflare_record" "socket" {
      + allow_overwrite = false
      + created_on      = (known after apply)
      + hostname        = (known after apply)
      + id              = (known after apply)
      + metadata        = (known after apply)
      + modified_on     = (known after apply)
      + name            = "socket"
      + proxiable       = (known after apply)
      + proxied         = true
      + ttl             = 1
      + type            = "CNAME"
      + value           = "zendo4jt.up.railway.app"
      + zone_id         = "a17204c79af55fcf05e4975f66e2490e"
    }

  # cloudflare_zone_settings_override.tarkov_dev will be updated in-place
  ~ resource "cloudflare_zone_settings_override" "tarkov_dev" {
        id                       = "a17204c79af55fcf05e4975f66e2490e"
        # (6 unchanged attributes hidden)

      ~ settings {
            # (51 unchanged attributes hidden)

          ~ minify {
              ~ css  = "off" -> "on"
              ~ html = "off" -> "on"
              ~ js   = "off" -> "on"
            }

            # (2 unchanged blocks hidden)
        }
    }

Plan: 1 to add, 1 to change, 0 to destroy.
cloudflare_record.socket: Creating...
cloudflare_zone_settings_override.tarkov_dev: Modifying... [id=a17204c79af55fcf05e4975f66e2490e]
cloudflare_zone_settings_override.tarkov_dev: Modifications complete after 7s [id=a17204c79af55fcf05e4975f66e2490e]
cloudflare_record.socket: Still creating... [10s elapsed]
cloudflare_record.socket: Still creating... [20s elapsed]
cloudflare_record.socket: Still creating... [30s elapsed]

Error: expected DNS record to not already be present but already exists

  with cloudflare_record.socket,
  on dns.tf line 64, in resource "cloudflare_record" "socket":
  64: resource "cloudflare_record" "socket" {

::error::Terraform exited with code 1.

@Razzmatazzz
Copy link
Copy Markdown
Member Author

.deploy

@github-actions
Copy link
Copy Markdown

Deployment Triggered 🚀

Razzmatazzz, started a branch deployment to production (branch: svg-cors)

You can watch the progress here 🔗

Details
{
  "type": "branch",
  "environment": {
    "name": "production",
    "url": null
  },
  "deployment": {
    "timestamp": "2026-02-23T13:51:40.283Z",
    "logs": "https://github.com/the-hideout/cloudflare/actions/runs/22308965980"
  },
  "git": {
    "branch": "svg-cors",
    "commit": "7a5f0aa66df3aeb8594895ef86cfc3def36f301f",
    "verified": true,
    "committer": "web-flow",
    "html_url": "https://github.com/the-hideout/cloudflare/commit/7a5f0aa66df3aeb8594895ef86cfc3def36f301f"
  },
  "context": {
    "actor": "Razzmatazzz",
    "noop": false,
    "fork": false,
    "comment": {
      "created_at": "2026-02-23T13:51:24Z",
      "updated_at": "2026-02-23T13:51:24Z",
      "body": ".deploy",
      "html_url": "https://github.com/the-hideout/cloudflare/pull/100#issuecomment-3944904264"
    }
  },
  "parameters": {
    "raw": null,
    "parsed": null
  }
}

@github-actions
Copy link
Copy Markdown

Deployment Results ✅

Razzmatazzz successfully branch deployed branch svg-cors to production

Show Results
Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  + create
  ~ update in-place

Terraform will perform the following actions:

  # cloudflare_record.socket will be created
  + resource "cloudflare_record" "socket" {
      + allow_overwrite = false
      + created_on      = (known after apply)
      + hostname        = (known after apply)
      + id              = (known after apply)
      + metadata        = (known after apply)
      + modified_on     = (known after apply)
      + name            = "socket"
      + proxiable       = (known after apply)
      + proxied         = true
      + ttl             = 1
      + type            = "CNAME"
      + value           = "zendo4jt.up.railway.app"
      + zone_id         = "a17204c79af55fcf05e4975f66e2490e"
    }

  # cloudflare_zone_settings_override.tarkov_dev will be updated in-place
  ~ resource "cloudflare_zone_settings_override" "tarkov_dev" {
        id                       = "a17204c79af55fcf05e4975f66e2490e"
        # (6 unchanged attributes hidden)

      ~ settings {
            # (51 unchanged attributes hidden)

          ~ minify {
              ~ css  = "off" -> "on"
              ~ html = "off" -> "on"
              ~ js   = "off" -> "on"
            }

            # (2 unchanged blocks hidden)
        }
    }

Plan: 1 to add, 1 to change, 0 to destroy.
cloudflare_record.socket: Creating...
cloudflare_zone_settings_override.tarkov_dev: Modifying... [id=a17204c79af55fcf05e4975f66e2490e]
cloudflare_record.socket: Creation complete after 1s [id=c81e3fc2d9c0e8c2818cb3cfb7643551]
cloudflare_zone_settings_override.tarkov_dev: Modifications complete after 6s [id=a17204c79af55fcf05e4975f66e2490e]

Apply complete! Resources: 1 added, 1 changed, 0 destroyed.

@GrantBirki
Copy link
Copy Markdown
Member

.noop

@github-actions
Copy link
Copy Markdown

⚠️ Cannot proceed with deployment

Sorry GrantBirki, the production environment deployment lock is currently claimed by Razzmatazzz

Lock Details 🔒

  • Environment: production
  • Branch: Fix-railway-dns
  • Created At: 2026-02-20T22:48:59.325Z
  • Created By: Razzmatazzz
  • Sticky: true
  • Global: false
  • Comment Link: click here
  • Lock Link: click here

The current lock has been active for 37d:0h:38m:55s

If you need to release the lock, please comment .unlock production

@GrantBirki
Copy link
Copy Markdown
Member

.unlock

@github-actions
Copy link
Copy Markdown

🔓 Deployment Lock Removed

The production deployment lock has been successfully removed

@GrantBirki
Copy link
Copy Markdown
Member

.noop

@github-actions
Copy link
Copy Markdown

Deployment Triggered 🚀

GrantBirki, started a noop deployment to production (noop: svg-cors)

You can watch the progress here 🔗

Details
{
  "type": "noop",
  "environment": {
    "name": "production",
    "url": null
  },
  "deployment": {
    "timestamp": "2026-03-29T23:28:32.517Z",
    "logs": "https://github.com/the-hideout/cloudflare/actions/runs/23721657662"
  },
  "git": {
    "branch": "svg-cors",
    "commit": "dbaedb73b0292abaa11382cff38a0e72909ba914",
    "verified": true,
    "committer": "web-flow",
    "html_url": "https://github.com/the-hideout/cloudflare/commit/dbaedb73b0292abaa11382cff38a0e72909ba914"
  },
  "context": {
    "actor": "GrantBirki",
    "noop": true,
    "fork": false,
    "comment": {
      "created_at": "2026-03-29T23:28:18Z",
      "updated_at": "2026-03-29T23:28:18Z",
      "body": ".noop",
      "html_url": "https://github.com/the-hideout/cloudflare/pull/100#issuecomment-4151307359"
    }
  },
  "parameters": {
    "raw": null,
    "parsed": null
  }
}

@github-actions
Copy link
Copy Markdown

Deployment Results ✅

GrantBirki successfully noop deployed branch svg-cors to production

Show Results
Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply":

  # cloudflare_record.socket has been deleted
  - resource "cloudflare_record" "socket" {
      - allow_overwrite = false -> null
      - created_on      = "2026-02-23T13:51:58.246572Z" -> null
      - hostname        = "socket.tarkov.dev" -> null
      - id              = "c81e3fc2d9c0e8c2818cb3cfb7643551" -> null
      - metadata        = {} -> null
      - modified_on     = "2026-02-23T13:51:58.246572Z" -> null
      - name            = "socket" -> null
      - proxiable       = true -> null
      - proxied         = true -> null
      - ttl             = 1 -> null
      - type            = "CNAME" -> null
      - value           = "zendo4jt.up.railway.app" -> null
      - zone_id         = "a17204c79af55fcf05e4975f66e2490e" -> null
    }

  # cloudflare_ruleset.cache_rules has changed
  ~ resource "cloudflare_ruleset" "cache_rules" {
        id      = "6510b58fb0ac44c9984077e55eb158d0"
        name    = "default"
        # (3 unchanged attributes hidden)

      + rules {
          + action      = "set_cache_settings"
          + description = "R2 API Bucket Cache"
          + enabled     = true
          + expression  = "(http.host eq \"api2.tarkov.dev\") or (http.host eq \"json.tarkov.dev\") or (http.host eq \"json-dev.tarkov.dev\")"
          + id          = "11f7caf8c6d24139aba6dc766ae35a01"

          + action_parameters {
              + automatic_https_rewrites   = false
              + bic                        = false
              + cache                      = true
              + cookie_fields              = []
              + disable_apps               = false
              + disable_railgun            = false
              + disable_zaraz              = false
              + email_obfuscation          = false
              + hotlink_protection         = false
              + increment                  = 0
              + mirage                     = false
              + opportunistic_encryption   = false
              + origin_error_page_passthru = false
              + phases                     = []
              + products                   = []
              + request_fields             = []
              + respect_strong_etags       = false
              + response_fields            = []
              + rocket_loader              = false
              + rules                      = {}
              + rulesets                   = []
              + server_side_excludes       = false
              + status_code                = 0
              + sxg                        = false

              + cache_key {
                  + cache_by_device_type       = false
                  + cache_deception_armor      = false
                  + ignore_query_strings_order = false

                  + custom_key {

                      + query_string {
                          + exclude = []
                          + include = []
                        }
                    }
                }

              + edge_ttl {
                  + default = 2678400
                  + mode    = "override_origin"
                }
            }
        }
        # (7 unchanged blocks hidden)
    }

  # cloudflare_ruleset.security_response_headers has changed
  ~ resource "cloudflare_ruleset" "security_response_headers" {
        id          = "99896b7130154c279bd0dd1d94f109ec"
        name        = "Security Response Headers"
        # (4 unchanged attributes hidden)

      + rules {
          + action      = "rewrite"
          + description = "Add CORS header to api2"
          + enabled     = true
          + expression  = "(http.host eq \"api2.tarkov.dev\")"
          + id          = "3f24d80bbcd94b809909c632c457cfe0"

          + action_parameters {
              + automatic_https_rewrites   = false
              + bic                        = false
              + cache                      = false
              + cookie_fields              = []
              + disable_apps               = false
              + disable_railgun            = false
              + disable_zaraz              = false
              + email_obfuscation          = false
              + hotlink_protection         = false
              + increment                  = 0
              + mirage                     = false
              + opportunistic_encryption   = false
              + origin_error_page_passthru = false
              + phases                     = []
              + products                   = []
              + request_fields             = []
              + respect_strong_etags       = false
              + response_fields            = []
              + rocket_loader              = false
              + rules                      = {}
              + rulesets                   = []
              + server_side_excludes       = false
              + status_code                = 0
              + sxg                        = false

              + headers {
                  + name      = "Access-Control-Allow-Origin"
                  + operation = "set"
                  + value     = "*"
                }
            }
        }
        # (3 unchanged blocks hidden)
    }

Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  + create
  ~ update in-place

Terraform will perform the following actions:

  # cloudflare_record.socket will be created
  + resource "cloudflare_record" "socket" {
      + allow_overwrite = true
      + created_on      = (known after apply)
      + hostname        = (known after apply)
      + id              = (known after apply)
      + metadata        = (known after apply)
      + modified_on     = (known after apply)
      + name            = "socket"
      + proxiable       = (known after apply)
      + proxied         = true
      + ttl             = 1
      + type            = "CNAME"
      + value           = "843dlh0u.up.railway.app"
      + zone_id         = "a17204c79af55fcf05e4975f66e2490e"
    }

  # cloudflare_ruleset.cache_rules will be updated in-place
  ~ resource "cloudflare_ruleset" "cache_rules" {
        id      = "6510b58fb0ac44c9984077e55eb158d0"
        name    = "default"
        # (3 unchanged attributes hidden)

      - rules {
          - action      = "set_cache_settings" -> null
          - description = "R2 API Bucket Cache" -> null
          - enabled     = true -> null
          - expression  = "(http.host eq \"api2.tarkov.dev\") or (http.host eq \"json.tarkov.dev\") or (http.host eq \"json-dev.tarkov.dev\")" -> null
          - id          = "11f7caf8c6d24139aba6dc766ae35a01" -> null

          - action_parameters {
              - automatic_https_rewrites   = false -> null
              - bic                        = false -> null
              - cache                      = true -> null
              - cookie_fields              = [] -> null
              - disable_apps               = false -> null
              - disable_railgun            = false -> null
              - disable_zaraz              = false -> null
              - email_obfuscation          = false -> null
              - hotlink_protection         = false -> null
              - increment                  = 0 -> null
              - mirage                     = false -> null
              - opportunistic_encryption   = false -> null
              - origin_error_page_passthru = false -> null
              - phases                     = [] -> null
              - products                   = [] -> null
              - request_fields             = [] -> null
              - respect_strong_etags       = false -> null
              - response_fields            = [] -> null
              - rocket_loader              = false -> null
              - rules                      = {} -> null
              - rulesets                   = [] -> null
              - server_side_excludes       = false -> null
              - status_code                = 0 -> null
              - sxg                        = false -> null

              - cache_key {
                  - cache_by_device_type       = false -> null
                  - cache_deception_armor      = false -> null
                  - ignore_query_strings_order = false -> null

                  - custom_key {

                      - query_string {
                          - exclude = [] -> null
                          - include = [] -> null
                        }
                    }
                }

              - edge_ttl {
                  - default = 2678400 -> null
                  - mode    = "override_origin" -> null
                }
            }
        }
        # (7 unchanged blocks hidden)
    }

  # cloudflare_ruleset.security_response_headers will be updated in-place
  ~ resource "cloudflare_ruleset" "security_response_headers" {
        id          = "99896b7130154c279bd0dd1d94f109ec"
        name        = "Security Response Headers"
        # (4 unchanged attributes hidden)

      - rules {
          - action      = "rewrite" -> null
          - description = "Add CORS header to api2" -> null
          - enabled     = true -> null
          - expression  = "(http.host eq \"api2.tarkov.dev\")" -> null
          - id          = "3f24d80bbcd94b809909c632c457cfe0" -> null

          - action_parameters {
              - automatic_https_rewrites   = false -> null
              - bic                        = false -> null
              - cache                      = false -> null
              - cookie_fields              = [] -> null
              - disable_apps               = false -> null
              - disable_railgun            = false -> null
              - disable_zaraz              = false -> null
              - email_obfuscation          = false -> null
              - hotlink_protection         = false -> null
              - increment                  = 0 -> null
              - mirage                     = false -> null
              - opportunistic_encryption   = false -> null
              - origin_error_page_passthru = false -> null
              - phases                     = [] -> null
              - products                   = [] -> null
              - request_fields             = [] -> null
              - respect_strong_etags       = false -> null
              - response_fields            = [] -> null
              - rocket_loader              = false -> null
              - rules                      = {} -> null
              - rulesets                   = [] -> null
              - server_side_excludes       = false -> null
              - status_code                = 0 -> null
              - sxg                        = false -> null

              - headers {
                  - name      = "Access-Control-Allow-Origin" -> null
                  - operation = "set" -> null
                  - value     = "*" -> null
                }
            }
        }
        # (3 unchanged blocks hidden)
    }

  # cloudflare_zone_settings_override.tarkov_dev will be updated in-place
  ~ resource "cloudflare_zone_settings_override" "tarkov_dev" {
        id                       = "a17204c79af55fcf05e4975f66e2490e"
        # (6 unchanged attributes hidden)

      ~ settings {
            # (51 unchanged attributes hidden)

          ~ minify {
              ~ css  = "off" -> "on"
              ~ html = "off" -> "on"
              ~ js   = "off" -> "on"
            }

            # (2 unchanged blocks hidden)
        }
    }

Plan: 1 to add, 3 to change, 0 to destroy.

@GrantBirki
Copy link
Copy Markdown
Member

.deploy

@github-actions
Copy link
Copy Markdown

Deployment Triggered 🚀

GrantBirki, started a branch deployment to production (branch: svg-cors)

You can watch the progress here 🔗

Details
{
  "type": "branch",
  "environment": {
    "name": "production",
    "url": null
  },
  "deployment": {
    "timestamp": "2026-03-29T23:29:27.191Z",
    "logs": "https://github.com/the-hideout/cloudflare/actions/runs/23721673339"
  },
  "git": {
    "branch": "svg-cors",
    "commit": "dbaedb73b0292abaa11382cff38a0e72909ba914",
    "verified": true,
    "committer": "web-flow",
    "html_url": "https://github.com/the-hideout/cloudflare/commit/dbaedb73b0292abaa11382cff38a0e72909ba914"
  },
  "context": {
    "actor": "GrantBirki",
    "noop": false,
    "fork": false,
    "comment": {
      "created_at": "2026-03-29T23:29:12Z",
      "updated_at": "2026-03-29T23:29:12Z",
      "body": ".deploy",
      "html_url": "https://github.com/the-hideout/cloudflare/pull/100#issuecomment-4151308675"
    }
  },
  "parameters": {
    "raw": null,
    "parsed": null
  }
}

@github-actions
Copy link
Copy Markdown

Deployment Results ✅

GrantBirki successfully branch deployed branch svg-cors to production

Show Results
Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply":

  # cloudflare_record.socket has been deleted
  - resource "cloudflare_record" "socket" {
      - allow_overwrite = false -> null
      - created_on      = "2026-02-23T13:51:58.246572Z" -> null
      - hostname        = "socket.tarkov.dev" -> null
      - id              = "c81e3fc2d9c0e8c2818cb3cfb7643551" -> null
      - metadata        = {} -> null
      - modified_on     = "2026-02-23T13:51:58.246572Z" -> null
      - name            = "socket" -> null
      - proxiable       = true -> null
      - proxied         = true -> null
      - ttl             = 1 -> null
      - type            = "CNAME" -> null
      - value           = "zendo4jt.up.railway.app" -> null
      - zone_id         = "a17204c79af55fcf05e4975f66e2490e" -> null
    }

  # cloudflare_ruleset.cache_rules has changed
  ~ resource "cloudflare_ruleset" "cache_rules" {
        id      = "6510b58fb0ac44c9984077e55eb158d0"
        name    = "default"
        # (3 unchanged attributes hidden)

      + rules {
          + action      = "set_cache_settings"
          + description = "R2 API Bucket Cache"
          + enabled     = true
          + expression  = "(http.host eq \"api2.tarkov.dev\") or (http.host eq \"json.tarkov.dev\") or (http.host eq \"json-dev.tarkov.dev\")"
          + id          = "11f7caf8c6d24139aba6dc766ae35a01"

          + action_parameters {
              + automatic_https_rewrites   = false
              + bic                        = false
              + cache                      = true
              + cookie_fields              = []
              + disable_apps               = false
              + disable_railgun            = false
              + disable_zaraz              = false
              + email_obfuscation          = false
              + hotlink_protection         = false
              + increment                  = 0
              + mirage                     = false
              + opportunistic_encryption   = false
              + origin_error_page_passthru = false
              + phases                     = []
              + products                   = []
              + request_fields             = []
              + respect_strong_etags       = false
              + response_fields            = []
              + rocket_loader              = false
              + rules                      = {}
              + rulesets                   = []
              + server_side_excludes       = false
              + status_code                = 0
              + sxg                        = false

              + cache_key {
                  + cache_by_device_type       = false
                  + cache_deception_armor      = false
                  + ignore_query_strings_order = false

                  + custom_key {

                      + query_string {
                          + exclude = []
                          + include = []
                        }
                    }
                }

              + edge_ttl {
                  + default = 2678400
                  + mode    = "override_origin"
                }
            }
        }
        # (7 unchanged blocks hidden)
    }

  # cloudflare_ruleset.security_response_headers has changed
  ~ resource "cloudflare_ruleset" "security_response_headers" {
        id          = "99896b7130154c279bd0dd1d94f109ec"
        name        = "Security Response Headers"
        # (4 unchanged attributes hidden)

      + rules {
          + action      = "rewrite"
          + description = "Add CORS header to api2"
          + enabled     = true
          + expression  = "(http.host eq \"api2.tarkov.dev\")"
          + id          = "3f24d80bbcd94b809909c632c457cfe0"

          + action_parameters {
              + automatic_https_rewrites   = false
              + bic                        = false
              + cache                      = false
              + cookie_fields              = []
              + disable_apps               = false
              + disable_railgun            = false
              + disable_zaraz              = false
              + email_obfuscation          = false
              + hotlink_protection         = false
              + increment                  = 0
              + mirage                     = false
              + opportunistic_encryption   = false
              + origin_error_page_passthru = false
              + phases                     = []
              + products                   = []
              + request_fields             = []
              + respect_strong_etags       = false
              + response_fields            = []
              + rocket_loader              = false
              + rules                      = {}
              + rulesets                   = []
              + server_side_excludes       = false
              + status_code                = 0
              + sxg                        = false

              + headers {
                  + name      = "Access-Control-Allow-Origin"
                  + operation = "set"
                  + value     = "*"
                }
            }
        }
        # (3 unchanged blocks hidden)
    }

Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  + create
  ~ update in-place

Terraform will perform the following actions:

  # cloudflare_record.socket will be created
  + resource "cloudflare_record" "socket" {
      + allow_overwrite = true
      + created_on      = (known after apply)
      + hostname        = (known after apply)
      + id              = (known after apply)
      + metadata        = (known after apply)
      + modified_on     = (known after apply)
      + name            = "socket"
      + proxiable       = (known after apply)
      + proxied         = true
      + ttl             = 1
      + type            = "CNAME"
      + value           = "843dlh0u.up.railway.app"
      + zone_id         = "a17204c79af55fcf05e4975f66e2490e"
    }

  # cloudflare_ruleset.cache_rules will be updated in-place
  ~ resource "cloudflare_ruleset" "cache_rules" {
        id      = "6510b58fb0ac44c9984077e55eb158d0"
        name    = "default"
        # (3 unchanged attributes hidden)

      - rules {
          - action      = "set_cache_settings" -> null
          - description = "R2 API Bucket Cache" -> null
          - enabled     = true -> null
          - expression  = "(http.host eq \"api2.tarkov.dev\") or (http.host eq \"json.tarkov.dev\") or (http.host eq \"json-dev.tarkov.dev\")" -> null
          - id          = "11f7caf8c6d24139aba6dc766ae35a01" -> null

          - action_parameters {
              - automatic_https_rewrites   = false -> null
              - bic                        = false -> null
              - cache                      = true -> null
              - cookie_fields              = [] -> null
              - disable_apps               = false -> null
              - disable_railgun            = false -> null
              - disable_zaraz              = false -> null
              - email_obfuscation          = false -> null
              - hotlink_protection         = false -> null
              - increment                  = 0 -> null
              - mirage                     = false -> null
              - opportunistic_encryption   = false -> null
              - origin_error_page_passthru = false -> null
              - phases                     = [] -> null
              - products                   = [] -> null
              - request_fields             = [] -> null
              - respect_strong_etags       = false -> null
              - response_fields            = [] -> null
              - rocket_loader              = false -> null
              - rules                      = {} -> null
              - rulesets                   = [] -> null
              - server_side_excludes       = false -> null
              - status_code                = 0 -> null
              - sxg                        = false -> null

              - cache_key {
                  - cache_by_device_type       = false -> null
                  - cache_deception_armor      = false -> null
                  - ignore_query_strings_order = false -> null

                  - custom_key {

                      - query_string {
                          - exclude = [] -> null
                          - include = [] -> null
                        }
                    }
                }

              - edge_ttl {
                  - default = 2678400 -> null
                  - mode    = "override_origin" -> null
                }
            }
        }
        # (7 unchanged blocks hidden)
    }

  # cloudflare_ruleset.security_response_headers will be updated in-place
  ~ resource "cloudflare_ruleset" "security_response_headers" {
        id          = "99896b7130154c279bd0dd1d94f109ec"
        name        = "Security Response Headers"
        # (4 unchanged attributes hidden)

      - rules {
          - action      = "rewrite" -> null
          - description = "Add CORS header to api2" -> null
          - enabled     = true -> null
          - expression  = "(http.host eq \"api2.tarkov.dev\")" -> null
          - id          = "3f24d80bbcd94b809909c632c457cfe0" -> null

          - action_parameters {
              - automatic_https_rewrites   = false -> null
              - bic                        = false -> null
              - cache                      = false -> null
              - cookie_fields              = [] -> null
              - disable_apps               = false -> null
              - disable_railgun            = false -> null
              - disable_zaraz              = false -> null
              - email_obfuscation          = false -> null
              - hotlink_protection         = false -> null
              - increment                  = 0 -> null
              - mirage                     = false -> null
              - opportunistic_encryption   = false -> null
              - origin_error_page_passthru = false -> null
              - phases                     = [] -> null
              - products                   = [] -> null
              - request_fields             = [] -> null
              - respect_strong_etags       = false -> null
              - response_fields            = [] -> null
              - rocket_loader              = false -> null
              - rules                      = {} -> null
              - rulesets                   = [] -> null
              - server_side_excludes       = false -> null
              - status_code                = 0 -> null
              - sxg                        = false -> null

              - headers {
                  - name      = "Access-Control-Allow-Origin" -> null
                  - operation = "set" -> null
                  - value     = "*" -> null
                }
            }
        }
        # (3 unchanged blocks hidden)
    }

  # cloudflare_zone_settings_override.tarkov_dev will be updated in-place
  ~ resource "cloudflare_zone_settings_override" "tarkov_dev" {
        id                       = "a17204c79af55fcf05e4975f66e2490e"
        # (6 unchanged attributes hidden)

      ~ settings {
            # (51 unchanged attributes hidden)

          ~ minify {
              ~ css  = "off" -> "on"
              ~ html = "off" -> "on"
              ~ js   = "off" -> "on"
            }

            # (2 unchanged blocks hidden)
        }
    }

Plan: 1 to add, 3 to change, 0 to destroy.
cloudflare_record.socket: Creating...
cloudflare_zone_settings_override.tarkov_dev: Modifying... [id=a17204c79af55fcf05e4975f66e2490e]
cloudflare_ruleset.security_response_headers: Modifying... [id=99896b7130154c279bd0dd1d94f109ec]
cloudflare_ruleset.cache_rules: Modifying... [id=6510b58fb0ac44c9984077e55eb158d0]
cloudflare_ruleset.security_response_headers: Modifications complete after 2s [id=99896b7130154c279bd0dd1d94f109ec]
cloudflare_ruleset.cache_rules: Modifications complete after 2s [id=6510b58fb0ac44c9984077e55eb158d0]
cloudflare_record.socket: Creation complete after 3s [id=d5622711d0be4ef4f58a9fc7b7fb7bed]
cloudflare_zone_settings_override.tarkov_dev: Modifications complete after 4s [id=a17204c79af55fcf05e4975f66e2490e]

Apply complete! Resources: 1 added, 3 changed, 0 destroyed.

@GrantBirki GrantBirki merged commit 40b3b2b into main Mar 29, 2026
2 checks passed
@GrantBirki GrantBirki deleted the svg-cors branch March 29, 2026 23:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants