UniversalSsl

Source: src/Cloudflare/Ssl/UniversalSsl.ts

The Universal SSL setting of a Cloudflare zone (/zones/{zone_id}/ssl/universal/settings).

Universal SSL is a zone singleton — the setting always exists (Cloudflare defaults it to enabled), so this resource never creates or deletes anything physical. Reconcile patches the setting when the observed value differs from the desired one; destroy restores the value the setting had before Alchemy first managed it (captured as initialEnabled).

Warning: disabling Universal SSL removes any active Universal SSL certificates for the zone from the edge. Visitors will see TLS errors unless advanced/custom certificates cover the zone’s hostnames.

Managing Universal SSL

Disable Universal SSL for a zone

yield* Cloudflare.UniversalSsl("UniversalSsl", {
  zoneId: zone.zoneId,
  enabled: false,
});

Pin Universal SSL enabled

yield* Cloudflare.UniversalSsl("UniversalSsl", {
  zoneId: zone.zoneId,
  enabled: true,
});