From 8b931d7e0a4bc6e53d54f9743046e205919e7330 Mon Sep 17 00:00:00 2001
From: Kyle Colantonio <k@yle.sh>
Date: Sun, 19 Nov 2023 15:25:05 -0500
Subject: [PATCH] fix(terraform): Enabled 0-RTT for TLS 1.3

---
 terraform/zones.tf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/terraform/zones.tf b/terraform/zones.tf
index 8f6a54ba..b34355f2 100644
--- a/terraform/zones.tf
+++ b/terraform/zones.tf
@@ -17,7 +17,7 @@ resource "cloudflare_zone_settings_override" "main" {
     }
     min_tls_version          = "1.2"
     opportunistic_encryption = "on"
-    tls_1_3                  = "on"
+    tls_1_3                  = "zrt" # 0-RTT
     automatic_https_rewrites = "on"
 
     # Security > Settings