feat: enable caching optimizations and edge cache for root domain

Author: xnoto

README.md

@@ -32,15 +32,21 @@ No modules.
 | [cloudflare_dns_record.root](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/dns_record) | resource |
 | [cloudflare_dns_record.spf](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/dns_record) | resource |
 | [cloudflare_dns_record.www](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/dns_record) | resource |
+| [cloudflare_ruleset.cache_rules](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/ruleset) | resource |
 | [cloudflare_zero_trust_access_application.warp](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/zero_trust_access_application) | resource |
 | [cloudflare_zero_trust_access_group.admins](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/zero_trust_access_group) | resource |
 | [cloudflare_zero_trust_access_identity_provider.github](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/zero_trust_access_identity_provider) | resource |
 | [cloudflare_zero_trust_organization.main](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/zero_trust_organization) | resource |
+| [cloudflare_zone_setting.brotli](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/zone_setting) | resource |
 | [cloudflare_zone_setting.browser_cache_ttl](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/zone_setting) | resource |
 | [cloudflare_zone_setting.browser_check](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/zone_setting) | resource |
 | [cloudflare_zone_setting.cache_level](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/zone_setting) | resource |
 | [cloudflare_zone_setting.challenge_ttl](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/zone_setting) | resource |
+| [cloudflare_zone_setting.early_hints](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/zone_setting) | resource |
 | [cloudflare_zone_setting.minify](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/zone_setting) | resource |
+| [cloudflare_zone_setting.polish](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/zone_setting) | resource |
+| [cloudflare_zone_setting.prefetch_preload](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/zone_setting) | resource |
+| [cloudflare_zone_setting.rocket_loader](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/zone_setting) | resource |
 | [cloudflare_zone.makeitwork_cloud](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/data-sources/zone) | data source |
 | [sops_file.secret_vars](https://registry.terraform.io/providers/carlpett/sops/latest/docs/data-sources/file) | data source |
 

cf-cache.tf

@@ -34,8 +34,66 @@ resource "cloudflare_zone_setting" "minify" {
   zone_id    = local.zone_id
   setting_id = "minify"
   value = {
-    css  = "off"
-    html = "off"
+    css  = "on"
+    html = "on"
     js   = "off"
   }
 }
+
+resource "cloudflare_zone_setting" "brotli" {
+  zone_id    = local.zone_id
+  setting_id = "brotli"
+  value      = "on"
+}
+
+resource "cloudflare_zone_setting" "early_hints" {
+  zone_id    = local.zone_id
+  setting_id = "early_hints"
+  value      = "on"
+}
+
+resource "cloudflare_zone_setting" "rocket_loader" {
+  zone_id    = local.zone_id
+  setting_id = "rocket_loader"
+  value      = "off"
+}
+
+resource "cloudflare_zone_setting" "polish" {
+  zone_id    = local.zone_id
+  setting_id = "polish"
+  value      = "off"
+}
+
+resource "cloudflare_zone_setting" "prefetch_preload" {
+  zone_id    = local.zone_id
+  setting_id = "prefetch_preload"
+  value      = "on"
+}
+
+# Cache rule for static HTML at root domain
+resource "cloudflare_ruleset" "cache_rules" {
+  zone_id     = local.zone_id
+  name        = "Cache Rules"
+  description = "Cache static HTML content"
+  kind        = "zone"
+  phase       = "http_request_cache_settings"
+
+  rules = [
+    {
+      action = "set_cache_settings"
+      action_parameters = {
+        cache = true
+        edge_ttl = {
+          mode    = "override_origin"
+          default = 3600 # 1 hour edge cache
+        }
+        browser_ttl = {
+          mode = "respect_origin"
+        }
+      }
+      expression  = "((http.host eq \"makeitwork.cloud\") or (http.host eq \"www.makeitwork.cloud\")) and ((http.request.uri.path eq \"/\") or (ends_with(http.request.uri.path, \".html\")))"
+      description = "Cache root and HTML pages for 1 hour at edge"
+      enabled     = true
+    }
+  ]
+}