diff --git a/README.md b/README.md
index c79f45c..3959aba 100644
--- a/README.md
+++ b/README.md
@@ -34,7 +34,6 @@ No modules.
 | [cloudflare_zero_trust_access_application.alertmanager](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/zero_trust_access_application) | resource |
 | [cloudflare_zero_trust_access_application.grafana_alerts](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/zero_trust_access_application) | resource |
 | [cloudflare_zero_trust_access_application.k3s](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/zero_trust_access_application) | resource |
-| [cloudflare_zero_trust_access_application.opencode](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/zero_trust_access_application) | resource |
 | [cloudflare_zero_trust_access_application.warp](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/zero_trust_access_application) | resource |
 | [cloudflare_zero_trust_access_group.admins](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/zero_trust_access_group) | resource |
 | [cloudflare_zero_trust_access_identity_provider.github](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/zero_trust_access_identity_provider) | resource |
diff --git a/cf-access-opencode.tf b/cf-access-opencode.tf
deleted file mode 100644
index 12bd1d7..0000000
--- a/cf-access-opencode.tf
+++ /dev/null
@@ -1,26 +0,0 @@
-# OpenCode can execute commands against its mounted workspace. Require the
-# existing GitHub-backed admins group before traffic reaches the origin.
-resource "cloudflare_zero_trust_access_application" "opencode" {
-  account_id       = local.account_id
-  name             = "OpenCode"
-  type             = "self_hosted"
-  domain           = "opencode.makeitwork.cloud"
-  session_duration = "24h"
-
-  allowed_idps = [
-    cloudflare_zero_trust_access_identity_provider.github.id,
-  ]
-
-  policies = [
-    {
-      name             = "makeitworkcloud-admins"
-      decision         = "allow"
-      session_duration = "24h"
-      include = [{
-        group = {
-          id = cloudflare_zero_trust_access_group.admins.id
-        }
-      }]
-    }
-  ]
-}