professional-service-best-practices/landingzone_ipsec
14
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

change comments

Browse source
This commit is contained in:
Michael_Sodan 2025-08-21 09:19:17 +00:00
parent 52b4eb3e0d
commit 28a16c1ba0
1 changed files with 13 additions and 21 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

34
01-network.tf
View file

@ -1,5 +1,4 @@
// ------- project 1 - landingzone ------------ */ ------- project 1 - landingzone ------------ */
// This file defines the network setup for the first project landingzone.
resource "stackit_network" "wan_network" { resource "stackit_network" "wan_network" {
project_id = module.project.project_info["project1"].project_id project_id = module.project.project_info["project1"].project_id
name = "wan_network" name = "wan_network"
@ -31,9 +30,7 @@ resource "stackit_network_interface" "lan1" {
name = "LAN1" name = "LAN1"
} }
# ---------- project 2 core ------------------ */ ---------- project 2 core ------------------ */
// This file defines the network setup for the second project (core).
resource "stackit_network" "p2_lan_network1" { resource "stackit_network" "p2_lan_network1" {
project_id = module.project.project_info["project2"].project_id project_id = module.project.project_info["project2"].project_id
name = "p2_lan_network" name = "p2_lan_network"
@ -49,8 +46,8 @@ resource "stackit_network_interface" "p2_lan1" {
//security_group_ids = [ stackit_security_group.example.security_group_id ] //security_group_ids = [ stackit_security_group.example.security_group_id ]
} }
// this is for adding a second network interface to the core project (for WAN access). */ this is for adding a second network interface to the core project (for WAN access).
/* resource "stackit_network" "p2_wan_network1" { resource "stackit_network" "p2_wan_network1" {
project_id = module.project.project_info["project2"].project_id project_id = module.project.project_info["project2"].project_id
name = "wan" name = "wan"
ipv4_prefix = "10.220.50.0/24" ipv4_prefix = "10.220.50.0/24"
@ -65,9 +62,7 @@ resource "stackit_network_interface" "p2_wan_interface1" {
} }
*/ */
# ---------- project 3 backup ------------------ */ ---------- project 3 backup ------------------ */
// This file defines the network setup for the third project (backup).
resource "stackit_network" "p3_lan_network1" { resource "stackit_network" "p3_lan_network1" {
project_id = module.project.project_info["project3"].project_id project_id = module.project.project_info["project3"].project_id
name = "p3_lan_network" name = "p3_lan_network"
@ -83,10 +78,9 @@ resource "stackit_network_interface" "p3_lan1" {
//security_group_ids = [ stackit_security_group.example.security_group_id ] //security_group_ids = [ stackit_security_group.example.security_group_id ]
} }
// project 4 for SKE, so no configuration necessary here */ project 4 for SKE, so no configuration necessary here */
// ------- project 5 - vpn ------------ */ ------- project 5 - vpn ------------ */
// This file defines the network setup for the fifth project (vpn).
resource "stackit_network" "wan_network_beta" { resource "stackit_network" "wan_network_beta" {
project_id = module.project.project_info["project5"].project_id project_id = module.project.project_info["project5"].project_id
name = "wan_network_beta" name = "wan_network_beta"
@ -118,9 +112,7 @@ resource "stackit_network_interface" "lan_beta" {
name = "LAN1" name = "LAN1"
} }
# ---------- project 6 infra ------------------ */ ---------- project 6 infra ------------------ */
// This file defines the network setup for the sixth project (infra).
resource "stackit_network" "p6_lan_network1" { resource "stackit_network" "p6_lan_network1" {
project_id = module.project.project_info["project6"].project_id project_id = module.project.project_info["project6"].project_id
name = "p6_lan_network" name = "p6_lan_network"
@ -136,8 +128,7 @@ resource "stackit_network_interface" "p6_lan1" {
//security_group_ids = [ stackit_security_group.example_beta.security_group_id ] //security_group_ids = [ stackit_security_group.example_beta.security_group_id ]
} }
// ---------- public IPs ------------------ */ ---------- public IP configuration------------- */
// This file defines the public IPs for the projects.
resource "stackit_public_ip" "wan_ip" { resource "stackit_public_ip" "wan_ip" {
project_id = module.project.project_info["project1"].project_id project_id = module.project.project_info["project1"].project_id
network_interface_id = stackit_network_interface.wan.network_interface_id network_interface_id = stackit_network_interface.wan.network_interface_id
@ -147,14 +138,14 @@ resource "stackit_public_ip" "wan_ip_beta" {
network_interface_id = stackit_network_interface.wan_beta.network_interface_id network_interface_id = stackit_network_interface.wan_beta.network_interface_id
} }
// this is for adding a public IP to the second project (core) for WAN access. */ this is for adding a public IP to the second project (core) for WAN access.
/*resource "stackit_public_ip" "wan_server" { resource "stackit_public_ip" "wan_server" {
project_id = module.project.project_info["project2"].project_id project_id = module.project.project_info["project2"].project_id
network_interface_id = stackit_network_interface.p2_wan_interface1.network_interface_id network_interface_id = stackit_network_interface.p2_wan_interface1.network_interface_id
} }
*/ */
// Output the public IPs for both projects */ Output the public IPs for both projects */
output "public_ips" { output "public_ips" {
value = { value = {
"pfsense-alpha" = stackit_public_ip.wan_ip.ip "pfsense-alpha" = stackit_public_ip.wan_ip.ip
@ -169,3 +160,4 @@ output "private_ips" {
"linux-beta" = stackit_network_interface.p6_lan1.ipv4 "linux-beta" = stackit_network_interface.p6_lan1.ipv4
} }
} }