professional-service-best-practices/landingzone_ipsec
14
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Rename the rest

Browse source
This commit is contained in:
Daniel_Groß 2025-08-25 17:28:29 +02:00
parent 945b18af83
commit 473be00e29
Signed by: daniel.gross
SSH key fingerprint: SHA256:tyyj1WVL1JmKHP6+jZjOtTzMj9U13qRk7jUcGI/zkRQ
3 changed files with 48 additions and 48 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

80
01-network.tf
View file

@ -9,7 +9,7 @@ resource "stackit_network" "landingzone_wan" {
resource "stackit_network" "landingzone_lan" {
project_id = module.project.project_info["landingzone"].project_id
name = "lan_network1"
name = "landingzone_lan"
ipv4_prefix = "10.220.1.0/24"
routed = true
}
@ -31,132 +31,132 @@ resource "stackit_network_interface" "landingzone_lan" {
}
/* ---------- project 2 core ------------------ */
resource "stackit_network" "p2_lan_network1" {
resource "stackit_network" "core_lan" {
project_id = module.project.project_info["core"].project_id
name = "p2_lan_network"
name = "core_lan"
ipv4_prefix = "10.220.5.0/24"
routed = true
}
resource "stackit_network_interface" "p2_lan1" {
resource "stackit_network_interface" "core_lan" {
project_id = module.project.project_info["core"].project_id
network_id = stackit_network.p2_lan_network1.network_id
network_id = stackit_network.core_lan.network_id
security = false
name = "P2LAN1"
name = "CORELAN"
security_group_ids = [ stackit_security_group.example.security_group_id ]
}
/* this is for adding a second network interface to the core project (for WAN access).*/
resource "stackit_network" "p2_wan_network1" {
resource "stackit_network" "core_wan" {
project_id = module.project.project_info["core"].project_id
name = "wan"
name = "core_wan"
ipv4_prefix = "10.220.50.0/24"
routed = true
}
resource "stackit_network_interface" "p2_wan_interface1" {
resource "stackit_network_interface" "core_wan" {
project_id = module.project.project_info["core"].project_id
network_id = stackit_network.p2_wan_network1.network_id
network_id = stackit_network.core_wan.network_id
security = false
name = "wan_if"
name = "core_wan_if"
}
/**/
/* ---------- project 3 backup ------------------ */
resource "stackit_network" "p3_lan_network1" {
resource "stackit_network" "backup_lan" {
project_id = module.project.project_info["backup"].project_id
name = "p3_lan_network"
name = "backup_lan"
ipv4_prefix = "10.220.6.0/24"
routed = true
}
resource "stackit_network_interface" "p3_lan1" {
resource "stackit_network_interface" "backup_lan" {
project_id = module.project.project_info["backup"].project_id
network_id = stackit_network.p3_lan_network1.network_id
network_id = stackit_network.backup_lan.network_id
security = false
name = "P3LAN1"
name = "BACKUPLAN"
//security_group_ids = [ stackit_security_group.example.security_group_id ]
}
/* project 4 for SKE, so no configuration necessary here */
/* ------- project 5 - vpn ------------ */
resource "stackit_network" "wan_network_beta" {
resource "stackit_network" "vpn_wan" {
project_id = module.project.project_info["vpn"].project_id
name = "wan_network_beta"
name = "vpn_wan"
ipv4_nameservers = ["1.1.1.1", "8.8.8.8"]
ipv4_prefix = "10.230.0.0/24"
routed = true
}
resource "stackit_network" "lan_network_beta" {
resource "stackit_network" "vpn_lan" {
project_id = module.project.project_info["vpn"].project_id
name = "lan_network_beta"
name = "vpn_lan"
ipv4_prefix = "10.230.1.0/24"
routed = true
}
resource "stackit_network_interface" "wan_beta" {
resource "stackit_network_interface" "vpn_wan" {
project_id = module.project.project_info["vpn"].project_id
network_id = stackit_network.wan_network_beta.network_id
network_id = stackit_network.vpn_wan.network_id
security = false
name = "MGMT"
ipv4 = "10.230.0.254"
}
resource "stackit_network_interface" "lan_beta" {
resource "stackit_network_interface" "vpn_lan" {
project_id = module.project.project_info["vpn"].project_id
network_id = stackit_network.lan_network_beta.network_id
network_id = stackit_network.vpn_lan.network_id
security = false
name = "LAN1"
name = "VPNLAN"
}
/* ---------- project 6 infra ------------------ */
resource "stackit_network" "p6_lan_network1" {
resource "stackit_network" "infra_lan" {
project_id = module.project.project_info["infra"].project_id
name = "p6_lan_network"
name = "infra_lan"
ipv4_prefix = "10.230.5.0/24"
routed = true
}
resource "stackit_network_interface" "p6_lan1" {
resource "stackit_network_interface" "infra_lan" {
project_id = module.project.project_info["infra"].project_id
network_id = stackit_network.p6_lan_network1.network_id
network_id = stackit_network.infra_lan.network_id
security = false
name = "P6LAN1"
name = "INFRALAN"
security_group_ids = [ stackit_security_group.example_beta.security_group_id ]
}
/* ---------- public IP configuration------------- */
resource "stackit_public_ip" "wan_ip" {
resource "stackit_public_ip" "landingzone_wan" {
project_id = module.project.project_info["landingzone"].project_id
network_interface_id = stackit_network_interface.landingzone_wan.network_interface_id
}
resource "stackit_public_ip" "wan_ip_beta" {
resource "stackit_public_ip" "vpn_wan" {
project_id = module.project.project_info["vpn"].project_id
network_interface_id = stackit_network_interface.wan_beta.network_interface_id
network_interface_id = stackit_network_interface.vpn_wan.network_interface_id
}
/* this is for adding a public IP to the second project (core) for WAN access. */
resource "stackit_public_ip" "wan_server" {
resource "stackit_public_ip" "core_wan" {
project_id = module.project.project_info["core"].project_id
network_interface_id = stackit_network_interface.p2_wan_interface1.network_interface_id
network_interface_id = stackit_network_interface.core_wan.network_interface_id
}
/* Output the public IPs for both projects */
output "public_ips" {
value = {
"pfsense-alpha" = stackit_public_ip.wan_ip.ip
"pfsense-beta" = stackit_public_ip.wan_ip_beta.ip
"wan_server" = stackit_public_ip.wan_server.ip
"pfsense-alpha" = stackit_public_ip.landingzone_wan.ip
"pfsense-beta" = stackit_public_ip.vpn_wan.ip
"wan_server" = stackit_public_ip.core_wan.ip
}
}
output "private_ips" {
value = {
"linux-alpha" = stackit_network_interface.p2_lan1.ipv4
"linux-beta" = stackit_network_interface.p6_lan1.ipv4
"linux-alpha" = stackit_network_interface.core_lan.ipv4
"linux-beta" = stackit_network_interface.infra_lan.ipv4
}
}

4
03-pfSense-appliance.tf
View file

@ -46,7 +46,7 @@ resource "stackit_server" "pfsense_appliance_beta" {
}
availability_zone = var.region_az1
machine_type = var.flavor
network_interfaces = [stackit_network_interface.wan_beta.network_interface_id, stackit_network_interface.lan_beta.network_interface_id ]
depends_on = [ stackit_network.wan_network_beta ]
network_interfaces = [stackit_network_interface.vpn_wan.network_interface_id, stackit_network_interface.vpn_lan.network_interface_id ]
depends_on = [ stackit_network.vpn_wan ]
}

12
05-server.tf
View file

@ -20,9 +20,9 @@ resource "stackit_server" "dev_server" {
}
availability_zone = var.region_az1
machine_type = var.flavor
network_interfaces = [stackit_network_interface.p2_lan1.network_interface_id ]
network_interfaces = [stackit_network_interface.core_lan.network_interface_id ]
keypair_name = stackit_key_pair.keypair.name
depends_on = [ stackit_network_interface.p2_lan1 ]
depends_on = [ stackit_network_interface.core_lan ]
}
data "stackit_image" "debian" {
@ -52,9 +52,9 @@ resource "stackit_server" "dev_server_p3" {
}
availability_zone = var.region_az1
machine_type = var.flavor
network_interfaces = [stackit_network_interface.p3_lan1.network_interface_id ]
network_interfaces = [stackit_network_interface.backup_lan.network_interface_id ]
keypair_name = stackit_key_pair.keypair.name
depends_on = [ stackit_network_interface.p3_lan1 ]
depends_on = [ stackit_network_interface.backup_lan ]
}
@ -80,9 +80,9 @@ resource "stackit_server" "dev_server_p6" {
}
availability_zone = var.region_az1
machine_type = var.flavor
network_interfaces = [stackit_network_interface.p6_lan1.network_interface_id ]
network_interfaces = [stackit_network_interface.infra_lan.network_interface_id ]
keypair_name = stackit_key_pair.keypair.name
depends_on = [ stackit_network_interface.p6_lan1 ]
depends_on = [ stackit_network_interface.infra_lan ]
}