@quantcdn/pulumi-quant 0.1.0

package/types/input.ts

@@ -0,0 +1,585 @@
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "../types/input";
+import * as outputs from "../types/output";
+
+export interface CrawlerAssets {
+    /**
+     * Network intercept configuration for asset collection
+     */
+    networkIntercept?: pulumi.Input<inputs.CrawlerAssetsNetworkIntercept>;
+    /**
+     * Parser configuration for asset extraction
+     */
+    parser?: pulumi.Input<inputs.CrawlerAssetsParser>;
+}
+
+export interface CrawlerAssetsNetworkIntercept {
+    /**
+     * Enable network intercept
+     */
+    enabled?: pulumi.Input<boolean>;
+    /**
+     * Execute JavaScript during asset collection
+     */
+    executeJs?: pulumi.Input<boolean>;
+    /**
+     * Request timeout in seconds
+     */
+    timeout?: pulumi.Input<number>;
+}
+
+export interface CrawlerAssetsParser {
+    /**
+     * Enable parser
+     */
+    enabled?: pulumi.Input<boolean>;
+}
+
+export interface CrawlerSitemap {
+    /**
+     * Recursively follow sitemap links
+     */
+    recursive?: pulumi.Input<boolean>;
+    /**
+     * Sitemap URL
+     */
+    url?: pulumi.Input<string>;
+}
+
+export interface DomainDnsGoLiveRecord {
+    /**
+     * Human-readable instructions for configuring this DNS record
+     */
+    description?: pulumi.Input<string>;
+    /**
+     * DNS record name/host (@ for apex/root domains, subdomain name for subdomains)
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * DNS record type (CNAME, A, or ALIAS)
+     */
+    type?: pulumi.Input<string>;
+    /**
+     * DNS record value (IP addresses for A records, domain name for CNAME/ALIAS)
+     */
+    value?: pulumi.Input<string>;
+}
+
+export interface DomainDnsValidationRecord {
+    /**
+     * DNS record name (host/subdomain)
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * DNS record type (typically CNAME)
+     */
+    type?: pulumi.Input<string>;
+    /**
+     * DNS record value to point to
+     */
+    value?: pulumi.Input<string>;
+}
+
+export interface RuleAuthActionConfig {
+    /**
+     * Authentication password
+     */
+    authPass?: pulumi.Input<string>;
+    /**
+     * Authentication username
+     */
+    authUser?: pulumi.Input<string>;
+}
+
+export interface RuleBotChallengeActionConfig {
+    /**
+     * Challenge TTL in seconds
+     */
+    robotChallengeChallengeTtl?: pulumi.Input<number>;
+    /**
+     * Challenge type (invisible or checkbox)
+     */
+    robotChallengeType?: pulumi.Input<string>;
+    /**
+     * Verification TTL in seconds
+     */
+    robotChallengeVerificationTtl?: pulumi.Input<number>;
+}
+
+export interface RuleContentFilterActionConfig {
+    /**
+     * Function UUID
+     */
+    fnUuid?: pulumi.Input<string>;
+}
+
+export interface RuleCustomResponseActionConfig {
+    /**
+     * Custom response body content
+     */
+    customResponseBody?: pulumi.Input<string>;
+    /**
+     * HTTP status code for custom response
+     */
+    customResponseStatusCode?: pulumi.Input<number>;
+}
+
+export interface RuleFunctionActionConfig {
+    /**
+     * Function UUID
+     */
+    fnUuid?: pulumi.Input<string>;
+}
+
+export interface RuleHeadersActionConfig {
+    /**
+     * Headers to set
+     */
+    headers?: pulumi.Input<{[key: string]: pulumi.Input<string>}>;
+}
+
+export interface RuleProxyActionConfig {
+    /**
+     * Quant Cloud application container (required when applicationProxy is true)
+     */
+    applicationContainer?: pulumi.Input<string>;
+    /**
+     * Quant Cloud application environment (required when applicationProxy is true)
+     */
+    applicationEnvironment?: pulumi.Input<string>;
+    /**
+     * Quant Cloud application name (required when applicationProxy is true)
+     */
+    applicationName?: pulumi.Input<string>;
+    /**
+     * Quant Cloud application port (required when applicationProxy is true)
+     */
+    applicationPort?: pulumi.Input<number>;
+    /**
+     * Enable Quant Cloud application proxy mode
+     */
+    applicationProxy?: pulumi.Input<boolean>;
+    /**
+     * Basic auth password
+     */
+    authPass?: pulumi.Input<string>;
+    /**
+     * Basic auth username
+     */
+    authUser?: pulumi.Input<string>;
+    /**
+     * Cache lifetime
+     */
+    cacheLifetime?: pulumi.Input<string>;
+    /**
+     * Disable SSL verification
+     */
+    disableSslVerify?: pulumi.Input<boolean>;
+    /**
+     * Failover cache lifetime
+     */
+    failoverLifetime?: pulumi.Input<string>;
+    /**
+     * Enable failover mode
+     */
+    failoverMode?: pulumi.Input<boolean>;
+    /**
+     * Status codes for failover (default: 200,404,301,302,304)
+     */
+    failoverOriginStatusCodes?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Failover TTFB threshold
+     */
+    failoverOriginTtfb?: pulumi.Input<string>;
+    /**
+     * Host header override
+     */
+    host?: pulumi.Input<string>;
+    /**
+     * Headers to inject
+     */
+    injectHeaders?: pulumi.Input<{[key: string]: pulumi.Input<string>}>;
+    /**
+     * Notification type (none, slack)
+     */
+    notify?: pulumi.Input<string>;
+    /**
+     * Notification configuration (required when notify is slack)
+     */
+    notifyConfig?: pulumi.Input<inputs.RuleProxyActionConfigNotifyConfig>;
+    /**
+     * Only proxy 404 responses
+     */
+    onlyProxy404?: pulumi.Input<boolean>;
+    /**
+     * Origin timeout
+     */
+    originTimeout?: pulumi.Input<string>;
+    /**
+     * Proxy alert enabled
+     */
+    proxyAlertEnabled?: pulumi.Input<boolean>;
+    /**
+     * Proxy inline function enabled
+     */
+    proxyInlineFnEnabled?: pulumi.Input<boolean>;
+    /**
+     * Headers to strip from response
+     */
+    proxyStripHeaders?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Headers to strip from request
+     */
+    proxyStripRequestHeaders?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Quant Cloud application proxy selection (populated automatically when applicationProxy is enabled)
+     */
+    quantCloudSelection?: pulumi.Input<inputs.RuleProxyActionConfigQuantCloudSelection>;
+    /**
+     * Static error page content (HTML) to serve on origin errors
+     */
+    staticErrorPage?: pulumi.Input<string>;
+    /**
+     * Origin status codes that trigger static error page
+     */
+    staticErrorPageStatusCodes?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Target URL to proxy to
+     */
+    to?: pulumi.Input<string>;
+    /**
+     * Web Application Firewall configuration
+     */
+    wafConfig?: pulumi.Input<inputs.RuleProxyActionConfigWafConfig>;
+    /**
+     * WAF enabled
+     */
+    wafEnabled?: pulumi.Input<boolean>;
+}
+
+export interface RuleProxyActionConfigNotifyConfig {
+    /**
+     * Slack webhook URL
+     */
+    webhookUrl?: pulumi.Input<string>;
+}
+
+export interface RuleProxyActionConfigQuantCloudSelection {
+    /**
+     * Application name
+     */
+    app?: pulumi.Input<string>;
+    /**
+     * Container name
+     */
+    container?: pulumi.Input<string>;
+    /**
+     * Environment name
+     */
+    env?: pulumi.Input<string>;
+    /**
+     * Container port
+     */
+    port?: pulumi.Input<number>;
+}
+
+export interface RuleProxyActionConfigWafConfig {
+    /**
+     * IP addresses to allow
+     */
+    allowIps?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * WAF rule IDs to allow/whitelist
+     */
+    allowRules?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * ASN numbers to block
+     */
+    blockAsns?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * IP addresses to block
+     */
+    blockIps?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Enable predefined block lists
+     */
+    blockLists?: pulumi.Input<inputs.RuleProxyActionConfigWafConfigBlockLists>;
+    /**
+     * Referer patterns to block
+     */
+    blockReferers?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * User agent patterns to block
+     */
+    blockUas?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Project Honey Pot HTTP:BL configuration
+     */
+    httpbl?: pulumi.Input<inputs.RuleProxyActionConfigWafConfigHttpbl>;
+    /**
+     * WAF operation mode
+     */
+    mode?: pulumi.Input<string>;
+    /**
+     * Email addresses for notifications
+     */
+    notifyEmails?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Slack webhook URL for notifications
+     */
+    notifySlack?: pulumi.Input<string>;
+    /**
+     * Minimum hits per minute to trigger Slack notification
+     */
+    notifySlackHitsRpm?: pulumi.Input<number>;
+    /**
+     * OWASP paranoia level
+     */
+    paranoiaLevel?: pulumi.Input<number>;
+    /**
+     * Rate limiting thresholds
+     */
+    thresholds?: pulumi.Input<pulumi.Input<inputs.RuleProxyActionConfigWafConfigThreshold>[]>;
+}
+
+export interface RuleProxyActionConfigWafConfigBlockLists {
+    /**
+     * Block AI crawlers
+     */
+    ai?: pulumi.Input<boolean>;
+    /**
+     * Block known bad IPs
+     */
+    ip?: pulumi.Input<boolean>;
+    /**
+     * Block known bad referers
+     */
+    referer?: pulumi.Input<boolean>;
+    /**
+     * Block known bad user agents
+     */
+    userAgent?: pulumi.Input<boolean>;
+}
+
+export interface RuleProxyActionConfigWafConfigHttpbl {
+    /**
+     * Block email harvesters
+     */
+    blockHarvester?: pulumi.Input<boolean>;
+    /**
+     * Block search engines
+     */
+    blockSearchEngine?: pulumi.Input<boolean>;
+    /**
+     * Block spam sources
+     */
+    blockSpam?: pulumi.Input<boolean>;
+    /**
+     * Block suspicious IPs
+     */
+    blockSuspicious?: pulumi.Input<boolean>;
+    /**
+     * Enable HTTP:BL
+     */
+    httpblEnabled?: pulumi.Input<boolean>;
+    /**
+     * HTTP:BL API key
+     */
+    httpblKey?: pulumi.Input<string>;
+}
+
+export interface RuleProxyActionConfigWafConfigThreshold {
+    /**
+     * Cooldown period in seconds
+     */
+    cooldown?: pulumi.Input<number>;
+    /**
+     * Hit count limit (for waf_hit_by_ip)
+     */
+    hits?: pulumi.Input<number>;
+    /**
+     * Time window in minutes (for waf_hit_by_ip)
+     */
+    minutes?: pulumi.Input<number>;
+    /**
+     * Threshold enforcement mode
+     */
+    mode?: pulumi.Input<string>;
+    /**
+     * Slack webhook for this threshold
+     */
+    notifySlack?: pulumi.Input<string>;
+    /**
+     * Requests per second limit (for ip/header)
+     */
+    rps?: pulumi.Input<number>;
+    /**
+     * Threshold type
+     */
+    type?: pulumi.Input<string>;
+    /**
+     * Header name (for header type)
+     */
+    value?: pulumi.Input<string>;
+}
+
+export interface RuleProxyWafConfig {
+    /**
+     * IP addresses to allow
+     */
+    allowIps?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * WAF rule IDs to allow/whitelist
+     */
+    allowRules?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * ASN numbers to block
+     */
+    blockAsns?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * IP addresses to block
+     */
+    blockIps?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Enable predefined block lists
+     */
+    blockLists?: pulumi.Input<inputs.RuleProxyWafConfigBlockLists>;
+    /**
+     * Referer patterns to block
+     */
+    blockReferers?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * User agent patterns to block
+     */
+    blockUas?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Project Honey Pot HTTP:BL configuration
+     */
+    httpbl?: pulumi.Input<inputs.RuleProxyWafConfigHttpbl>;
+    /**
+     * WAF operation mode
+     */
+    mode?: pulumi.Input<string>;
+    /**
+     * Email addresses for notifications
+     */
+    notifyEmails?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Slack webhook URL for notifications
+     */
+    notifySlack?: pulumi.Input<string>;
+    /**
+     * Minimum hits per minute to trigger Slack notification
+     */
+    notifySlackHitsRpm?: pulumi.Input<number>;
+    /**
+     * OWASP paranoia level
+     */
+    paranoiaLevel?: pulumi.Input<number>;
+    /**
+     * Rate limiting thresholds
+     */
+    thresholds?: pulumi.Input<pulumi.Input<inputs.RuleProxyWafConfigThreshold>[]>;
+}
+
+export interface RuleProxyWafConfigBlockLists {
+    /**
+     * Block AI crawlers
+     */
+    ai?: pulumi.Input<boolean>;
+    /**
+     * Block known bad IPs
+     */
+    ip?: pulumi.Input<boolean>;
+    /**
+     * Block known bad referers
+     */
+    referer?: pulumi.Input<boolean>;
+    /**
+     * Block known bad user agents
+     */
+    userAgent?: pulumi.Input<boolean>;
+}
+
+export interface RuleProxyWafConfigHttpbl {
+    /**
+     * Block email harvesters
+     */
+    blockHarvester?: pulumi.Input<boolean>;
+    /**
+     * Block search engines
+     */
+    blockSearchEngine?: pulumi.Input<boolean>;
+    /**
+     * Block spam sources
+     */
+    blockSpam?: pulumi.Input<boolean>;
+    /**
+     * Block suspicious IPs
+     */
+    blockSuspicious?: pulumi.Input<boolean>;
+    /**
+     * Enable HTTP:BL
+     */
+    httpblEnabled?: pulumi.Input<boolean>;
+    /**
+     * HTTP:BL API key
+     */
+    httpblKey?: pulumi.Input<string>;
+}
+
+export interface RuleProxyWafConfigThreshold {
+    /**
+     * Cooldown period in seconds
+     */
+    cooldown?: pulumi.Input<number>;
+    /**
+     * Hit count limit (for waf_hit_by_ip)
+     */
+    hits?: pulumi.Input<number>;
+    /**
+     * Time window in minutes (for waf_hit_by_ip)
+     */
+    minutes?: pulumi.Input<number>;
+    /**
+     * Threshold enforcement mode
+     */
+    mode?: pulumi.Input<string>;
+    /**
+     * Slack webhook for this threshold
+     */
+    notifySlack?: pulumi.Input<string>;
+    /**
+     * Requests per second limit (for ip/header)
+     */
+    rps?: pulumi.Input<number>;
+    /**
+     * Threshold type
+     */
+    type?: pulumi.Input<string>;
+    /**
+     * Header name (for header type)
+     */
+    value?: pulumi.Input<string>;
+}
+
+export interface RuleRedirectActionConfig {
+    /**
+     * HTTP status code for redirect
+     */
+    statusCode?: pulumi.Input<string>;
+    /**
+     * Redirect destination URL
+     */
+    to?: pulumi.Input<string>;
+}
+
+export interface RuleServeStaticActionConfig {
+    /**
+     * Path to the static file to serve
+     */
+    staticFilePath?: pulumi.Input<string>;
+}