professional-service-best-practices/landingzone_ipsec
14
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Rename the rest

Browse source
This commit is contained in:
Daniel_Groß 2025-08-25 17:28:29 +02:00
parent 945b18af83
commit 473be00e29
Signed by: daniel.gross
SSH key fingerprint: SHA256:tyyj1WVL1JmKHP6+jZjOtTzMj9U13qRk7jUcGI/zkRQ
3 changed files with 48 additions and 48 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

80
01-network.tf
View file

@ -9,7 +9,7 @@ resource "stackit_network" "landingzone_wan" {
resource "stackit_network" "landingzone_lan" { resource "stackit_network" "landingzone_lan" {
project_id = module.project.project_info["landingzone"].project_id project_id = module.project.project_info["landingzone"].project_id
name = "lan_network1" name = "landingzone_lan"
ipv4_prefix = "10.220.1.0/24" ipv4_prefix = "10.220.1.0/24"
routed = true routed = true
} }
@ -31,132 +31,132 @@ resource "stackit_network_interface" "landingzone_lan" {
} }
/* ---------- project 2 core ------------------ */ /* ---------- project 2 core ------------------ */
resource "stackit_network" "p2_lan_network1" { resource "stackit_network" "core_lan" {
project_id = module.project.project_info["core"].project_id project_id = module.project.project_info["core"].project_id
name = "p2_lan_network" name = "core_lan"
ipv4_prefix = "10.220.5.0/24" ipv4_prefix = "10.220.5.0/24"
routed = true routed = true
} }
resource "stackit_network_interface" "p2_lan1" { resource "stackit_network_interface" "core_lan" {
project_id = module.project.project_info["core"].project_id project_id = module.project.project_info["core"].project_id
network_id = stackit_network.p2_lan_network1.network_id network_id = stackit_network.core_lan.network_id
security = false security = false
name = "P2LAN1" name = "CORELAN"
security_group_ids = [ stackit_security_group.example.security_group_id ] security_group_ids = [ stackit_security_group.example.security_group_id ]
} }
/* this is for adding a second network interface to the core project (for WAN access).*/ /* this is for adding a second network interface to the core project (for WAN access).*/
resource "stackit_network" "p2_wan_network1" { resource "stackit_network" "core_wan" {
project_id = module.project.project_info["core"].project_id project_id = module.project.project_info["core"].project_id
name = "wan" name = "core_wan"
ipv4_prefix = "10.220.50.0/24" ipv4_prefix = "10.220.50.0/24"
routed = true routed = true
} }
resource "stackit_network_interface" "p2_wan_interface1" { resource "stackit_network_interface" "core_wan" {
project_id = module.project.project_info["core"].project_id project_id = module.project.project_info["core"].project_id
network_id = stackit_network.p2_wan_network1.network_id network_id = stackit_network.core_wan.network_id
security = false security = false
name = "wan_if" name = "core_wan_if"
} }
/**/ /**/
/* ---------- project 3 backup ------------------ */ /* ---------- project 3 backup ------------------ */
resource "stackit_network" "p3_lan_network1" { resource "stackit_network" "backup_lan" {
project_id = module.project.project_info["backup"].project_id project_id = module.project.project_info["backup"].project_id
name = "p3_lan_network" name = "backup_lan"
ipv4_prefix = "10.220.6.0/24" ipv4_prefix = "10.220.6.0/24"
routed = true routed = true
} }
resource "stackit_network_interface" "p3_lan1" { resource "stackit_network_interface" "backup_lan" {
project_id = module.project.project_info["backup"].project_id project_id = module.project.project_info["backup"].project_id
network_id = stackit_network.p3_lan_network1.network_id network_id = stackit_network.backup_lan.network_id
security = false security = false
name = "P3LAN1" name = "BACKUPLAN"
//security_group_ids = [ stackit_security_group.example.security_group_id ] //security_group_ids = [ stackit_security_group.example.security_group_id ]
} }
/* project 4 for SKE, so no configuration necessary here */ /* project 4 for SKE, so no configuration necessary here */
/* ------- project 5 - vpn ------------ */ /* ------- project 5 - vpn ------------ */
resource "stackit_network" "wan_network_beta" { resource "stackit_network" "vpn_wan" {
project_id = module.project.project_info["vpn"].project_id project_id = module.project.project_info["vpn"].project_id
name = "wan_network_beta" name = "vpn_wan"
ipv4_nameservers = ["1.1.1.1", "8.8.8.8"] ipv4_nameservers = ["1.1.1.1", "8.8.8.8"]
ipv4_prefix = "10.230.0.0/24" ipv4_prefix = "10.230.0.0/24"
routed = true routed = true
} }
resource "stackit_network" "lan_network_beta" { resource "stackit_network" "vpn_lan" {
project_id = module.project.project_info["vpn"].project_id project_id = module.project.project_info["vpn"].project_id
name = "lan_network_beta" name = "vpn_lan"
ipv4_prefix = "10.230.1.0/24" ipv4_prefix = "10.230.1.0/24"
routed = true routed = true
} }
resource "stackit_network_interface" "wan_beta" { resource "stackit_network_interface" "vpn_wan" {
project_id = module.project.project_info["vpn"].project_id project_id = module.project.project_info["vpn"].project_id
network_id = stackit_network.wan_network_beta.network_id network_id = stackit_network.vpn_wan.network_id
security = false security = false
name = "MGMT" name = "MGMT"
ipv4 = "10.230.0.254" ipv4 = "10.230.0.254"
} }
resource "stackit_network_interface" "lan_beta" { resource "stackit_network_interface" "vpn_lan" {
project_id = module.project.project_info["vpn"].project_id project_id = module.project.project_info["vpn"].project_id
network_id = stackit_network.lan_network_beta.network_id network_id = stackit_network.vpn_lan.network_id
security = false security = false
name = "LAN1" name = "VPNLAN"
} }
/* ---------- project 6 infra ------------------ */ /* ---------- project 6 infra ------------------ */
resource "stackit_network" "p6_lan_network1" { resource "stackit_network" "infra_lan" {
project_id = module.project.project_info["infra"].project_id project_id = module.project.project_info["infra"].project_id
name = "p6_lan_network" name = "infra_lan"
ipv4_prefix = "10.230.5.0/24" ipv4_prefix = "10.230.5.0/24"
routed = true routed = true
} }
resource "stackit_network_interface" "p6_lan1" { resource "stackit_network_interface" "infra_lan" {
project_id = module.project.project_info["infra"].project_id project_id = module.project.project_info["infra"].project_id
network_id = stackit_network.p6_lan_network1.network_id network_id = stackit_network.infra_lan.network_id
security = false security = false
name = "P6LAN1" name = "INFRALAN"
security_group_ids = [ stackit_security_group.example_beta.security_group_id ] security_group_ids = [ stackit_security_group.example_beta.security_group_id ]
} }
/* ---------- public IP configuration------------- */ /* ---------- public IP configuration------------- */
resource "stackit_public_ip" "wan_ip" { resource "stackit_public_ip" "landingzone_wan" {
project_id = module.project.project_info["landingzone"].project_id project_id = module.project.project_info["landingzone"].project_id
network_interface_id = stackit_network_interface.landingzone_wan.network_interface_id network_interface_id = stackit_network_interface.landingzone_wan.network_interface_id
} }
resource "stackit_public_ip" "wan_ip_beta" { resource "stackit_public_ip" "vpn_wan" {
project_id = module.project.project_info["vpn"].project_id project_id = module.project.project_info["vpn"].project_id
network_interface_id = stackit_network_interface.wan_beta.network_interface_id network_interface_id = stackit_network_interface.vpn_wan.network_interface_id
} }
/* this is for adding a public IP to the second project (core) for WAN access. */ /* this is for adding a public IP to the second project (core) for WAN access. */
resource "stackit_public_ip" "wan_server" { resource "stackit_public_ip" "core_wan" {
project_id = module.project.project_info["core"].project_id project_id = module.project.project_info["core"].project_id
network_interface_id = stackit_network_interface.p2_wan_interface1.network_interface_id network_interface_id = stackit_network_interface.core_wan.network_interface_id
} }
/* Output the public IPs for both projects */ /* Output the public IPs for both projects */
output "public_ips" { output "public_ips" {
value = { value = {
"pfsense-alpha" = stackit_public_ip.wan_ip.ip "pfsense-alpha" = stackit_public_ip.landingzone_wan.ip
"pfsense-beta" = stackit_public_ip.wan_ip_beta.ip "pfsense-beta" = stackit_public_ip.vpn_wan.ip
"wan_server" = stackit_public_ip.wan_server.ip "wan_server" = stackit_public_ip.core_wan.ip
} }
} }
output "private_ips" { output "private_ips" {
value = { value = {
"linux-alpha" = stackit_network_interface.p2_lan1.ipv4 "linux-alpha" = stackit_network_interface.core_lan.ipv4
"linux-beta" = stackit_network_interface.p6_lan1.ipv4 "linux-beta" = stackit_network_interface.infra_lan.ipv4
} }
} }

4
03-pfSense-appliance.tf
View file

@ -46,7 +46,7 @@ resource "stackit_server" "pfsense_appliance_beta" {
} }
availability_zone = var.region_az1 availability_zone = var.region_az1
machine_type = var.flavor machine_type = var.flavor
network_interfaces = [stackit_network_interface.wan_beta.network_interface_id, stackit_network_interface.lan_beta.network_interface_id ] network_interfaces = [stackit_network_interface.vpn_wan.network_interface_id, stackit_network_interface.vpn_lan.network_interface_id ]
depends_on = [ stackit_network.wan_network_beta ] depends_on = [ stackit_network.vpn_wan ]
} }

12
05-server.tf
View file

@ -20,9 +20,9 @@ resource "stackit_server" "dev_server" {
} }
availability_zone = var.region_az1 availability_zone = var.region_az1
machine_type = var.flavor machine_type = var.flavor
network_interfaces = [stackit_network_interface.p2_lan1.network_interface_id ] network_interfaces = [stackit_network_interface.core_lan.network_interface_id ]
keypair_name = stackit_key_pair.keypair.name keypair_name = stackit_key_pair.keypair.name
depends_on = [ stackit_network_interface.p2_lan1 ] depends_on = [ stackit_network_interface.core_lan ]
} }
data "stackit_image" "debian" { data "stackit_image" "debian" {
@ -52,9 +52,9 @@ resource "stackit_server" "dev_server_p3" {
} }
availability_zone = var.region_az1 availability_zone = var.region_az1
machine_type = var.flavor machine_type = var.flavor
network_interfaces = [stackit_network_interface.p3_lan1.network_interface_id ] network_interfaces = [stackit_network_interface.backup_lan.network_interface_id ]
keypair_name = stackit_key_pair.keypair.name keypair_name = stackit_key_pair.keypair.name
depends_on = [ stackit_network_interface.p3_lan1 ] depends_on = [ stackit_network_interface.backup_lan ]
} }
@ -80,9 +80,9 @@ resource "stackit_server" "dev_server_p6" {
} }
availability_zone = var.region_az1 availability_zone = var.region_az1
machine_type = var.flavor machine_type = var.flavor
network_interfaces = [stackit_network_interface.p6_lan1.network_interface_id ] network_interfaces = [stackit_network_interface.infra_lan.network_interface_id ]
keypair_name = stackit_key_pair.keypair.name keypair_name = stackit_key_pair.keypair.name
depends_on = [ stackit_network_interface.p6_lan1 ] depends_on = [ stackit_network_interface.infra_lan ]
} }