pangea-cloudflare 0.1.0

data/lib/pangea/resources/cloudflare_custom_pages/resource.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_custom_pages/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareCustomPages
+    def cloudflare_custom_pages(name, attributes = {})
+      attrs = Cloudflare::Types::CustomPagesAttributes.new(attributes)
+      resource(:cloudflare_custom_pages, name) do
+        zone_id attrs.zone_id if attrs.zone_id
+        account_id attrs.account_id if attrs.account_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_custom_pages',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_custom_pages.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareCustomPages
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_custom_pages/types.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class CustomPagesAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId.optional.default(nil)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId.optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_custom_ssl/resource.rb

@@ -0,0 +1,36 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_custom_ssl/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareCustomSsl
+    def cloudflare_custom_ssl(name, attributes = {})
+      attrs = Cloudflare::Types::CustomSslAttributes.new(attributes)
+      resource(:cloudflare_custom_ssl, name) do
+        zone_id attrs.zone_id
+        certificate attrs.certificate if attrs.certificate
+        private_key attrs.private_key if attrs.private_key
+        bundle_method attrs.bundle_method if attrs.bundle_method
+        geo_restrictions attrs.geo_restrictions if attrs.geo_restrictions
+        type attrs.type if attrs.type
+        policy attrs.policy if attrs.policy
+      end
+      ResourceReference.new(
+        type: 'cloudflare_custom_ssl',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: {
+          id: "${cloudflare_custom_ssl.#{name}.id}",
+          status: "${cloudflare_custom_ssl.#{name}.status}",
+          expires_on: "${cloudflare_custom_ssl.#{name}.expires_on}"
+        }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareCustomSsl
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_custom_ssl/types.rb

@@ -0,0 +1,16 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class CustomSslAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId
+    attribute :certificate, Dry::Types['strict.string'].optional.default(nil)
+    attribute :private_key, Dry::Types['strict.string'].optional.default(nil)
+    attribute :bundle_method, Dry::Types['strict.string'].enum('ubiquitous', 'optimal', 'force').optional.default(nil)
+    attribute :geo_restrictions, Dry::Types['strict.hash'].optional.default(nil)
+    attribute :type, Dry::Types['strict.string'].enum('legacy_custom', 'sni_custom').optional.default(nil)
+    attribute :policy, Dry::Types['strict.string'].optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_d1_database/resource.rb

@@ -0,0 +1,92 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_d1_database/types'
+require 'pangea/resource_registry'
+
+module Pangea
+  module Resources
+    # Cloudflare D1 Database resource module that self-registers
+    module CloudflareD1Database
+      # Create a Cloudflare D1 Database
+      #
+      # D1 is Cloudflare's serverless SQL database built on SQLite.
+      # Provides global low-latency access with automatic replication.
+      #
+      # @param name [Symbol] The resource name
+      # @param attributes [Hash] Database attributes
+      # @option attributes [String] :account_id Cloudflare account ID (required)
+      # @option attributes [String] :name Database name (required)
+      # @option attributes [String] :primary_location_hint Primary region (optional: wnam, enam, weur, eeur, apac, oc)
+      #
+      # @return [ResourceReference] Reference object with outputs
+      #
+      # @example Create a production database
+      #   d1_database(:users_db, {
+      #     account_id: "a" * 32,
+      #     name: "users-production",
+      #     primary_location_hint: "wnam"
+      #   })
+      #
+      # @example Create database for EU data residency
+      #   d1_database(:gdpr_db, {
+      #     account_id: "a" * 32,
+      #     name: "eu-customer-data",
+      #     primary_location_hint: "weur"
+      #   })
+      #
+      # @example Create database with automatic location
+      #   d1_database(:cache_db, {
+      #     account_id: "a" * 32,
+      #     name: "edge-cache"
+      #   })
+      def cloudflare_d1_database(name, attributes = {})
+        # Validate attributes using dry-struct
+        db_attrs = Cloudflare::Types::D1DatabaseAttributes.new(attributes)
+
+        # Generate terraform resource block via terraform-synthesizer
+        resource(:cloudflare_d1_database, name) do
+          account_id db_attrs.account_id
+          name db_attrs.name
+          primary_location_hint db_attrs.primary_location_hint if db_attrs.primary_location_hint
+        end
+
+        # Return resource reference with available outputs
+        ResourceReference.new(
+          type: 'cloudflare_d1_database',
+          name: name,
+          resource_attributes: db_attrs.to_h,
+          outputs: {
+            id: "${cloudflare_d1_database.#{name}.id}",
+            database_id: "${cloudflare_d1_database.#{name}.id}",
+            database_name: "${cloudflare_d1_database.#{name}.name}",
+            version: "${cloudflare_d1_database.#{name}.version}"
+          }
+        )
+      end
+    end
+
+    # Maintain backward compatibility by extending Cloudflare module
+    module Cloudflare
+      include CloudflareD1Database
+    end
+  end
+end
+
+# Auto-register this module when it's loaded
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_d1_database/types.rb

@@ -0,0 +1,110 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea
+  module Resources
+    module Cloudflare
+      module Types
+        # D1 database primary location hint enum
+        CloudflareD1Location = Dry::Types['strict.string'].enum(
+          'wnam',  # Western North America
+          'enam',  # Eastern North America
+          'weur',  # Western Europe
+          'eeur',  # Eastern Europe
+          'apac',  # Asia-Pacific
+          'oc'     # Oceania
+        )
+
+        # Type-safe attributes for Cloudflare D1 Database
+        #
+        # D1 is Cloudflare's serverless SQL database built on SQLite.
+        # Perfect for relational data with global low-latency access.
+        #
+        # @example Create a D1 database
+        #   D1DatabaseAttributes.new(
+        #     account_id: "a" * 32,
+        #     name: "production-db",
+        #     primary_location_hint: "wnam"
+        #   )
+        class D1DatabaseAttributes < Dry::Struct
+          transform_keys(&:to_sym)
+
+          # @!attribute account_id
+          #   @return [String] The Cloudflare account ID
+          attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId
+
+          # @!attribute name
+          #   @return [String] Database name (human-readable identifier)
+          attribute :name, Dry::Types['strict.string'].constrained(
+            min_size: 1,
+            max_size: 256
+          )
+
+          # @!attribute primary_location_hint
+          #   @return [String, nil] Primary location hint for database
+          attribute :primary_location_hint, CloudflareD1Location.optional.default(nil)
+
+          # Get the full region name from location code
+          # @return [String, nil] Human-readable region name
+          def region_name
+            case primary_location_hint
+            when 'wnam'
+              'Western North America'
+            when 'enam'
+              'Eastern North America'
+            when 'weur'
+              'Western Europe'
+            when 'eeur'
+              'Eastern Europe'
+            when 'apac'
+              'Asia-Pacific'
+            when 'oc'
+              'Oceania'
+            else
+              'Automatic'
+            end
+          end
+
+          # Extract environment from name if present
+          # @return [String, nil] Environment name if detected
+          def environment
+            case name.downcase
+            when /production|prod/
+              'production'
+            when /staging|stage/
+              'staging'
+            when /development|dev/
+              'development'
+            when /test/
+              'test'
+            else
+              nil
+            end
+          end
+
+          # Check if this is a production database based on naming
+          # @return [Boolean] true if appears to be production
+          def production?
+            environment == 'production'
+          end
+        end
+      end
+    end
+  end
+end

data/lib/pangea/resources/cloudflare_dns_firewall/resource.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_dns_firewall/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareDnsFirewall
+    def cloudflare_dns_firewall(name, attributes = {})
+      attrs = Cloudflare::Types::DnsFirewallAttributes.new(attributes)
+      resource(:cloudflare_dns_firewall, name) do
+        zone_id attrs.zone_id if attrs.zone_id
+        account_id attrs.account_id if attrs.account_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_dns_firewall',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_dns_firewall.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareDnsFirewall
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_dns_firewall/types.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class DnsFirewallAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId.optional.default(nil)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId.optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_dns_zone_transfers_acl/resource.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_dns_zone_transfers_acl/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareDnsZoneTransfersAcl
+    def cloudflare_dns_zone_transfers_acl(name, attributes = {})
+      attrs = Cloudflare::Types::DnsZoneTransfersAclAttributes.new(attributes)
+      resource(:cloudflare_dns_zone_transfers_acl, name) do
+        zone_id attrs.zone_id if attrs.zone_id
+        account_id attrs.account_id if attrs.account_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_dns_zone_transfers_acl',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_dns_zone_transfers_acl.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareDnsZoneTransfersAcl
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_dns_zone_transfers_acl/types.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class DnsZoneTransfersAclAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId.optional.default(nil)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId.optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_dns_zone_transfers_incoming/resource.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_dns_zone_transfers_incoming/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareDnsZoneTransfersIncoming
+    def cloudflare_dns_zone_transfers_incoming(name, attributes = {})
+      attrs = Cloudflare::Types::DnsZoneTransfersIncomingAttributes.new(attributes)
+      resource(:cloudflare_dns_zone_transfers_incoming, name) do
+        zone_id attrs.zone_id if attrs.zone_id
+        account_id attrs.account_id if attrs.account_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_dns_zone_transfers_incoming',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_dns_zone_transfers_incoming.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareDnsZoneTransfersIncoming
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_dns_zone_transfers_incoming/types.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class DnsZoneTransfersIncomingAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId.optional.default(nil)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId.optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_dns_zone_transfers_outgoing/resource.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_dns_zone_transfers_outgoing/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareDnsZoneTransfersOutgoing
+    def cloudflare_dns_zone_transfers_outgoing(name, attributes = {})
+      attrs = Cloudflare::Types::DnsZoneTransfersOutgoingAttributes.new(attributes)
+      resource(:cloudflare_dns_zone_transfers_outgoing, name) do
+        zone_id attrs.zone_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_dns_zone_transfers_outgoing',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_dns_zone_transfers_outgoing.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareDnsZoneTransfersOutgoing
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_dns_zone_transfers_outgoing/types.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class DnsZoneTransfersOutgoingAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId
+  end
+end

data/lib/pangea/resources/cloudflare_dns_zone_transfers_peer/resource.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_dns_zone_transfers_peer/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareDnsZoneTransfersPeer
+    def cloudflare_dns_zone_transfers_peer(name, attributes = {})
+      attrs = Cloudflare::Types::DnsZoneTransfersPeerAttributes.new(attributes)
+      resource(:cloudflare_dns_zone_transfers_peer, name) do
+        zone_id attrs.zone_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_dns_zone_transfers_peer',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_dns_zone_transfers_peer.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareDnsZoneTransfersPeer
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_dns_zone_transfers_peer/types.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class DnsZoneTransfersPeerAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId
+  end
+end

data/lib/pangea/resources/cloudflare_dns_zone_transfers_tsig/resource.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_dns_zone_transfers_tsig/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareDnsZoneTransfersTsig
+    def cloudflare_dns_zone_transfers_tsig(name, attributes = {})
+      attrs = Cloudflare::Types::DnsZoneTransfersTsigAttributes.new(attributes)
+      resource(:cloudflare_dns_zone_transfers_tsig, name) do
+        zone_id attrs.zone_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_dns_zone_transfers_tsig',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_dns_zone_transfers_tsig.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareDnsZoneTransfersTsig
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_dns_zone_transfers_tsig/types.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class DnsZoneTransfersTsigAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId
+  end
+end

data/lib/pangea/resources/cloudflare_email_routing_address/resource.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_email_routing_address/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareEmailRoutingAddress
+    def cloudflare_email_routing_address(name, attributes = {})
+      attrs = Cloudflare::Types::EmailRoutingAddressAttributes.new(attributes)
+      resource(:cloudflare_email_routing_address, name) do
+        zone_id attrs.zone_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_email_routing_address',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_email_routing_address.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareEmailRoutingAddress
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_email_routing_address/types.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class EmailRoutingAddressAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId
+  end
+end

data/lib/pangea/resources/cloudflare_email_routing_catch_all/resource.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_email_routing_catch_all/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareEmailRoutingCatchAll
+    def cloudflare_email_routing_catch_all(name, attributes = {})
+      attrs = Cloudflare::Types::EmailRoutingCatchAllAttributes.new(attributes)
+      resource(:cloudflare_email_routing_catch_all, name) do
+        zone_id attrs.zone_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_email_routing_catch_all',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_email_routing_catch_all.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareEmailRoutingCatchAll
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_email_routing_catch_all/types.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class EmailRoutingCatchAllAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId
+  end
+end

data/lib/pangea/resources/cloudflare_email_routing_dns/resource.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_email_routing_dns/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareEmailRoutingDns
+    def cloudflare_email_routing_dns(name, attributes = {})
+      attrs = Cloudflare::Types::EmailRoutingDnsAttributes.new(attributes)
+      resource(:cloudflare_email_routing_dns, name) do
+        zone_id attrs.zone_id if attrs.zone_id
+        account_id attrs.account_id if attrs.account_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_email_routing_dns',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_email_routing_dns.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareEmailRoutingDns
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_email_routing_dns/types.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class EmailRoutingDnsAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId.optional.default(nil)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId.optional.default(nil)
+  end
+end