DeviceCustomProfile

Source: src/Cloudflare/Devices/CustomProfile.ts

A Cloudflare WARP custom device profile — a settings profile applied to the subset of devices matched by a wirefilter match expression at a given precedence.

All properties are mutable in place: the profile itself is patched, and the per-profile split-tunnel include/exclude and fallback-domain lists are replaced via their dedicated endpoints. Deleting the resource deletes the profile; matched devices fall back to the account’s default profile.

Creating a profile

const profile = yield* Cloudflare.DeviceCustomProfile("Contractors", {
  match: 'identity.groups.name == "contractors"',
  precedence: 100,
  description: "Locked-down profile for contractors",
  switchLocked: true,
});

Split tunneling

yield* Cloudflare.DeviceCustomProfile("Engineering", {
  match: 'identity.groups.name == "engineering"',
  precedence: 50,
  exclude: [
    { address: "10.0.0.0/8", description: "RFC1918" },
  ],
});

Fallback domains

yield* Cloudflare.DeviceCustomProfile("CorpDns", {
  match: 'identity.email matches ".*@corp.example.com"',
  precedence: 10,
  fallbackDomains: [
    { suffix: "corp.example.com", dnsServer: ["10.0.0.53"] },
  ],
});