terraform-iaas-api-basic-ha.../03-network.tf
Mauritz Uphoff 6a5f928648
All checks were successful
CI / Terraform Format & Validate (push) Successful in 14s
CI / TruffleHog Secrets Scan (push) Successful in 55s
Initial commit
2025-06-10 16:32:16 +02:00

70 lines
1.7 KiB
HCL

/*
Copyright 2023 Schwarz IT KG <markus.brunsch@mail.schwarz>
Copyright 2024-2025 STACKIT GmbH & Co. KG <markus.brunsch@stackit.cloud>
Use of this source code is governed by an MIT-style
license that can be found in the LICENSE file or at
https://opensource.org/licenses/MIT.
*/
# Create vNET Network
resource "stackit_network" "default" {
project_id = var.STACKIT_PROJECT_ID
ipv4_prefix = "10.1.2.0/24"
name = "default"
ipv4_nameservers = ["9.9.9.9", "1.1.1.1"]
}
# Security Group
resource "stackit_security_group" "active-passive" {
project_id = var.STACKIT_PROJECT_ID
name = "ha-active-passive"
}
resource "stackit_security_group_rule" "icmp" {
project_id = var.STACKIT_PROJECT_ID
security_group_id = stackit_security_group.active-passive.security_group_id
direction = "ingress"
icmp_parameters = {
code = 0
type = 8
}
protocol = {
name = "icmp"
}
}
resource "stackit_security_group_rule" "ssh" {
project_id = var.STACKIT_PROJECT_ID
security_group_id = stackit_security_group.active-passive.security_group_id
direction = "ingress"
port_range = {
min = 22
max = 22
}
protocol = {
name = "tcp"
}
}
resource "stackit_security_group_rule" "http" {
project_id = var.STACKIT_PROJECT_ID
security_group_id = stackit_security_group.active-passive.security_group_id
direction = "ingress"
port_range = {
min = 80
max = 80
}
protocol = {
name = "tcp"
}
}
resource "stackit_security_group_rule" "vrrp" {
project_id = var.STACKIT_PROJECT_ID
security_group_id = stackit_security_group.active-passive.security_group_id
direction = "ingress"
protocol = {
name = "vrrp"
}
}