cloudflare_api_token    = "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" # Placeholder (format-valid)
cloudflare_account_id   = "00000000000000000000000000000000"         # Placeholder (format-valid)
cloudflare_account_name = ""

# Exercise empty-list safety
trusted_admin_ips = []
blocked_countries = []

# Even when flags are true, free-plan zones must gate these resources off
enable_managed_waf    = true
enable_bot_management = true

# Keep the full set of expected zones so hard-coded references stay valid
domains = {
  "offsec.global" = {
    plan       = "free"
    jump_start = false
  }
  "offsecglobal.com" = {
    plan       = "free"
    jump_start = false
  }
  "offsecagent.com" = {
    plan       = "free"
    jump_start = false
  }
  "offsecshield.com" = {
    plan       = "free"
    jump_start = false
  }
  "vaultmesh.org" = {
    plan       = "free"
    jump_start = false
  }
}