DEV5.6TP7/tp-cloud/terraform/modules/network/main.tf
2024-12-04 16:28:39 +01:00

78 lines
1.6 KiB
HCL

resource "google_compute_network" "vpc" {
name = "nom"
auto_create_subnetworks = false
}
resource "google_compute_subnetwork" "frontend" {
name = "frontend"
network = google_compute_network.vpc.id
ip_cidr_range = var.frontend_cidr
region = var.region
}
resource "google_compute_subnetwork" "backend" {
name = "backend"
network = google_compute_network.vpc.id
ip_cidr_range = var.backend_cidr
region = var.region
}
resource "google_compute_subnetwork" "db" {
name = "db"
network = google_compute_network.vpc.id
ip_cidr_range = var.database_cidr
region = var.region
}
resource "google_compute_firewall" "allowHttpHttps" {
name = "allowHttpHttps"
network = google_compute_network.vpc.id
allow {
protocol = "tcp"
ports = ["80", "443"]
}
source_ranges = ["0.0.0.0/0"]
target_tags = ["web"]
}
resource "google_compute_firewall" "allowSsh" {
name = "allowSsh"
network = google_compute_network.vpc.id
allow {
protocol = "tcp"
ports = ["22"]
}
source_ranges = var.ssh_source_ranges
target_tags = ["web"]
}
resource "google_compute_firewall" "frontToBack" {
name = "front-to-back"
network = google_compute_network.vpc.id
allow {
protocol = "tcp"
ports = ["8000"]
}
source_ranges = var.frontend_cidr
target_tags = ["backend"]
}
resource "google_compute_firewall" "backToDb" {
name = "backToDb"
network = google_compute_network.vpc.id
allow {
protocol = "tcp"
ports = ["3306"]
}
source_ranges = var.backend_cidr
target_tags = ["database"]
}