professional-service-best-practices/landingzone_ipsec
14
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

change comments

Browse source
This commit is contained in:
Michael_Sodan 2025-08-21 09:19:17 +00:00
parent 52b4eb3e0d
commit 28a16c1ba0
1 changed files with 13 additions and 21 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

34
01-network.tf
View file

@ -1,5 +1,4 @@
// ------- project 1 - landingzone ------------
// This file defines the network setup for the first project landingzone.
*/ ------- project 1 - landingzone ------------ */
resource "stackit_network" "wan_network" {
project_id = module.project.project_info["project1"].project_id
name = "wan_network"
@ -31,9 +30,7 @@ resource "stackit_network_interface" "lan1" {
name = "LAN1"
}
# ---------- project 2 core ------------------
// This file defines the network setup for the second project (core).
*/ ---------- project 2 core ------------------ */
resource "stackit_network" "p2_lan_network1" {
project_id = module.project.project_info["project2"].project_id
name = "p2_lan_network"
@ -49,8 +46,8 @@ resource "stackit_network_interface" "p2_lan1" {
//security_group_ids = [ stackit_security_group.example.security_group_id ]
}
// this is for adding a second network interface to the core project (for WAN access).
/* resource "stackit_network" "p2_wan_network1" {
*/ this is for adding a second network interface to the core project (for WAN access).
resource "stackit_network" "p2_wan_network1" {
project_id = module.project.project_info["project2"].project_id
name = "wan"
ipv4_prefix = "10.220.50.0/24"
@ -65,9 +62,7 @@ resource "stackit_network_interface" "p2_wan_interface1" {
}
*/
# ---------- project 3 backup ------------------
// This file defines the network setup for the third project (backup).
*/ ---------- project 3 backup ------------------ */
resource "stackit_network" "p3_lan_network1" {
project_id = module.project.project_info["project3"].project_id
name = "p3_lan_network"
@ -83,10 +78,9 @@ resource "stackit_network_interface" "p3_lan1" {
//security_group_ids = [ stackit_security_group.example.security_group_id ]
}
// project 4 for SKE, so no configuration necessary here
*/ project 4 for SKE, so no configuration necessary here */
// ------- project 5 - vpn ------------
// This file defines the network setup for the fifth project (vpn).
*/ ------- project 5 - vpn ------------ */
resource "stackit_network" "wan_network_beta" {
project_id = module.project.project_info["project5"].project_id
name = "wan_network_beta"
@ -118,9 +112,7 @@ resource "stackit_network_interface" "lan_beta" {
name = "LAN1"
}
# ---------- project 6 infra ------------------
// This file defines the network setup for the sixth project (infra).
*/ ---------- project 6 infra ------------------ */
resource "stackit_network" "p6_lan_network1" {
project_id = module.project.project_info["project6"].project_id
name = "p6_lan_network"
@ -136,8 +128,7 @@ resource "stackit_network_interface" "p6_lan1" {
//security_group_ids = [ stackit_security_group.example_beta.security_group_id ]
}
// ---------- public IPs ------------------
// This file defines the public IPs for the projects.
*/ ---------- public IP configuration------------- */
resource "stackit_public_ip" "wan_ip" {
project_id = module.project.project_info["project1"].project_id
network_interface_id = stackit_network_interface.wan.network_interface_id
@ -147,14 +138,14 @@ resource "stackit_public_ip" "wan_ip_beta" {
network_interface_id = stackit_network_interface.wan_beta.network_interface_id
}
// this is for adding a public IP to the second project (core) for WAN access.
/*resource "stackit_public_ip" "wan_server" {
*/ this is for adding a public IP to the second project (core) for WAN access.
resource "stackit_public_ip" "wan_server" {
project_id = module.project.project_info["project2"].project_id
network_interface_id = stackit_network_interface.p2_wan_interface1.network_interface_id
}
*/
// Output the public IPs for both projects
*/ Output the public IPs for both projects */
output "public_ips" {
value = {
"pfsense-alpha" = stackit_public_ip.wan_ip.ip
@ -169,3 +160,4 @@ output "private_ips" {
"linux-beta" = stackit_network_interface.p6_lan1.ipv4
}
}