professional-service-best-practices/terraform-pfsense-deployment
14
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
No description
10 commits 1 branch 0 tags 503 MiB
HCL 87.3%
D2 12.7%
Find a file
BackInBash 3ed56321ba updated provider
2024-10-10 17:19:38 +02:00
.gitignore Update .gitignore 2024-01-29 12:14:36 +01:00
00-provider.tf updated provider 2024-10-10 17:19:38 +02:00
01-config.tf added src header 2024-01-29 12:14:32 +01:00
02-pfsense-image.tf updated image 2024-01-29 12:14:58 +01:00
03-pfsense-network.tf added src header 2024-01-29 12:14:32 +01:00
04-pfsense-appliance.tf updated terraform provider 2024-06-27 11:11:02 +02:00
deployment.d2 init 2023-08-29 14:34:54 +02:00
deployment.svg init 2023-08-29 14:34:54 +02:00
example.env init 2023-08-29 14:34:54 +02:00
LICENSE Initial commit 2023-08-29 14:30:11 +02:00
README.md updated readme 2024-01-29 17:20:30 +01:00

README.md

STACKIT pfSense Deployment

Terraform script to deploy an pfSense firewall into STACKIT Cloud.

Deployment overview:

The Terraform deployment consists of:

  • WAN Network
  • WAN Router with external RouterIP
  • LAN Network
  • LAN Router with static default gateway router to the pfSense firewall
  • pfSense firewall VM + disk volume
  • FloatingIP for firewall VM
  • deactivating port security on firewall ports

Setup

Requirements:

  • Terraform installed
  • Access to a STACKIT project
  • UAT (OpenStack) credentials

Installation

  1. Clone Repo
  2. Setup enviroment (.env) variables
  3. Run Terraform terraform apply

Default Configuration

Interfaces

  1. vtnet0 WAN
  2. vtnet1 LAN

NAT

Masqurade (Outbound NAT) Traffic from LAN to WAN

DNS

Disable build in unbound DNS resolver and forward all DNS queries to public DNS Servers OpenDNS & Quad9

Dashboard

Customized Widgets and CSS settings

Password

Set default password for admin to STACKIT123!

Interface Access

Disabled Referer-Check Enable allow all wan adresses to connect to the WebUI

Now you can enter the WebUI via the FloatingIP on port 443 the default login is admin:STACKIT123!