aissi/but3-iac
1
0
Fork 0
forked from pierront/but3-iac
Code Pull Requests Activity

re correction

Browse Source
This commit is contained in:
aissi
2025-12-04 10:18:38 +01:00
parent 80494d0c96
commit ed14be22c5
1 changed files with 23 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files

44
tp-cloud/terraform/modules/network/main.tf
View File

@@ -6,34 +6,35 @@ resource "google_compute_network" "vpc" {
# Sous-réseau # Sous-réseau
# front-end # front-end
resource "google_compute_subnetwork" "front-end" { resource "google_compute_subnetwork" "frontend" {
name = "front-end" name = "frontend-subnet"
network = google_compute_network.vpc.id network = google_compute_network.vpc.id
ip_cidr_range = "10.0.1.0/24" ip_cidr_range = "10.0.1.0/24"
region = "europe-west1" region = "europe-west1"
} }
# back-end # back-end
resource "google_compute_subnetwork" "back-end" { resource "google_compute_subnetwork" "backend" {
name = "back-end" name = "backend-subnet"
network = google_compute_network.vpc.id network = google_compute_network.vpc.id
ip_cidr_range = "10.0.1.0/24" ip_cidr_range = "10.0.2.0/24"
region = "europe-west1" region = "europe-west1"
} }
# data-base # data-base
resource "google_compute_subnetwork" "data-base" { resource "google_compute_subnetwork" "database" {
name = "data-base" name = "database-subnet"
network = google_compute_network.vpc.id network = google_compute_network.vpc.id
ip_cidr_range = "10.0.1.0/24" ip_cidr_range = "10.0.3.0/24"
region = "europe-west1" region = "europe-west1"
} }
# Règles de Pare-feu # Règles de Pare-feu
# - HTTP/HTTPS vers frontend # - HTTP/HTTPS vers frontend
resource "google_compute_firewall" "allow-http" { resource "google_compute_firewall" "allow_http" {
name = "allow-http" name = "allow-http"
network = google_compute_network.vpc.id network = google_compute_network.vpc.id
@@ -43,12 +44,12 @@ resource "google_compute_firewall" "allow-http" {
} }
source_ranges = ["0.0.0.0/0"] source_ranges = ["0.0.0.0/0"]
target_tags = ["front-end"] target_tags = ["frontend"]
} }
# - SSH vers toutes les instances # - SSH vers toutes les instances
resource "google_compute_firewall" "to-instances" { resource "google_compute_firewall" "allow_ssh" {
name = "to-instances" name = "allow-ssh"
network = google_compute_network.vpc.id network = google_compute_network.vpc.id
allow { allow {
@@ -57,11 +58,12 @@ resource "google_compute_firewall" "to-instances" {
} }
source_ranges = ["0.0.0.0/0"] source_ranges = ["0.0.0.0/0"]
target_tags = ["ssh"]
} }
# - Port 8000 de frontend vers backend # - Port 8000 de frontend vers backend
resource "google_compute_firewall" "front-back" { resource "google_compute_firewall" "frontend_to_backend" {
name = "front-back" name = "frontend-to-backend"
network = google_compute_network.vpc.id network = google_compute_network.vpc.id
allow { allow {
@@ -69,13 +71,14 @@ resource "google_compute_firewall" "front-back" {
ports = ["8000"] ports = ["8000"]
} }
source_tags = ["front-end"] source_tags = ["frontend"]
target_tags = ["back-end"] target_tags = ["backend"]
} }
# - Port 3306 de backend vers database # - Port 3306 de backend vers database
resource "google_compute_firewall" "back-base" { resource "google_compute_firewall" "backend_to_database" {
name = "back-base" name = "backend-to-database"
network = google_compute_network.vpc.id network = google_compute_network.vpc.id
allow { allow {
@@ -83,7 +86,6 @@ resource "google_compute_firewall" "back-base" {
ports = ["3306"] ports = ["3306"]
} }
source_tags = ["back-end"] source_tags = ["backend"]
target_tags = ["data-base"] target_tags = ["database"]
} }