professional-service-best-practices/terraform-pfsense-deployment
14
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
No description
27 commits 1 branch 0 tags 503 MiB
HCL 87.3%
D2 12.7%
Find a file
BackInBash 6fa1642946 Update README.md
2025-04-10 09:17:24 +02:00
.gitignore Updated to STACKIT provider 2025-03-27 09:36:50 +01:00
00-provider.tf project firewall setup 2025-04-02 16:18:04 +02:00
01-config.tf project firewall setup 2025-04-02 16:18:04 +02:00
02-pfsense-image.tf updated image version 2025-04-02 16:21:57 +02:00
03-pfsense-network.tf project firewall setup 2025-04-02 16:18:04 +02:00
04-pfsense-appliance.tf refactoring 2025-04-02 14:25:53 +02:00
deployment.d2 init 2023-08-29 14:34:54 +02:00
deployment.svg init 2023-08-29 14:34:54 +02:00
example.env project firewall setup 2025-04-02 16:18:04 +02:00
LICENSE Initial commit 2023-08-29 14:30:11 +02:00
pfsense.qcow2 Create pfsense.qcow2 2025-03-27 09:41:06 +01:00
README.md Update README.md 2025-04-10 09:17:24 +02:00

README.md

STACKIT pfSense Deployment

Terraform script to deploy an pfSense firewall into STACKIT Cloud.

Deployment overview:

The Terraform deployment consists of:

  • WAN Network
  • LAN Network
  • pfSense firewall VM + disk volume
  • FloatingIP for firewall VM
  • deactivating port security on firewall ports

Setup

Requirements:

  • Terraform installed
  • Access to a STACKIT project
  • STACKIT Service-Account-Token

Installation

  1. Clone Repo
  2. Setup enviroment (.env) variables
  3. Run Terraform terraform apply

Default Configuration

Interfaces

  1. vtnet0 WAN
  2. vtnet1 LAN

NAT

Masqurade (Outbound NAT) Traffic from LAN to WAN

DNS

Disable build in unbound DNS resolver and forward all DNS queries to public DNS Servers OpenDNS & Quad9

Dashboard

Customized Widgets and CSS settings

Password

Set default password for admin to STACKIT123!

Interface Access

Disabled Referer-Check Enable allow all wan adresses to connect to the WebUI

Now you can enter the WebUI via the FloatingIP on port 443 the default login is admin:STACKIT123!