# Bind the module's cloudflare_* resources to the cloudflare/cloudflare provider explicitly.
# Without this, OpenTofu defaults the module's provider source to hashicorp/cloudflare, pulling a
# second (redundant) provider into the lock file and relying on a registry redirect.
# >= 5.20 because policies[].resources is now a JSON string (set via jsonencode in main.tf).
terraform {
  required_providers {
    cloudflare = {
      source  = "cloudflare/cloudflare"
      version = ">= 5.20"
    }
  }
}