kara-mosr/but3-iac
1
0
Fork 0
forked from pierront/but3-iac
Code Pull Requests Activity

ajout des configs terraform

Browse Source
This commit is contained in:
Riad KARA-MOSTEFA
2025-12-03 16:06:54 +01:00
parent a587d61ebe
commit 84d78b69e1
7 changed files with 76 additions and 77 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
terraform/modules/network/main.tf
View File

@@ -1,12 +1,10 @@
# 1. VPC personnalisé
resource "google_compute_network" "vpc_network" {
project = var.project_id
name = "three-tier-vpc"
auto_create_subnetworks = false # Exigence respectée
auto_create_subnetworks = false
routing_mode = "REGIONAL"
}
# 2. Sous-réseaux (frontend, backend, database)
resource "google_compute_subnetwork" "frontend_subnet" {
project = var.project_id
name = "frontend-subnet"
@@ -31,16 +29,13 @@ resource "google_compute_subnetwork" "database_subnet" {
network = google_compute_network.vpc_network.id
}
# 3. Règles de firewall (4 règles)
# Règle 1: HTTP/HTTPS vers frontend (80, 443)
resource "google_compute_firewall" "allow_web" {
project = var.project_id
name = "allow-http-https-frontend"
network = google_compute_network.vpc_network.name
direction = "INGRESS"
source_ranges = ["0.0.0.0/0"]
target_tags = ["frontend"]
target_tags = ["frontend"]
allow {
protocol = "tcp"
@@ -48,14 +43,13 @@ resource "google_compute_firewall" "allow_web" {
}
}
# Règle 2: SSH vers toutes les instances (22)
resource "google_compute_firewall" "allow_ssh" {
project = var.project_id
name = "allow-ssh-all"
network = google_compute_network.vpc_network.name
direction = "INGRESS"
source_ranges = var.ssh_source_ranges
target_tags = ["ssh"]
target_tags = ["ssh"]
allow {
protocol = "tcp"
@@ -63,14 +57,13 @@ resource "google_compute_firewall" "allow_ssh" {
}
}
# Règle 3: Port 8000 de frontend vers backend
resource "google_compute_firewall" "allow_frontend_to_backend" {
project = var.project_id
name = "allow-frontend-to-backend-8000"
network = google_compute_network.vpc_network.name
direction = "INGRESS"
source_tags = ["frontend"]
target_tags = ["backend"]
target_tags = ["backend"]
allow {
protocol = "tcp"
@@ -78,14 +71,13 @@ resource "google_compute_firewall" "allow_frontend_to_backend" {
}
}
# Règle 4: Port 3306 de backend vers database
resource "google_compute_firewall" "allow_backend_to_database" {
project = var.project_id
name = "allow-backend-to-database-3306"
network = google_compute_network.vpc_network.name
direction = "INGRESS"
source_tags = ["backend"]
target_tags = ["database"]
target_tags = ["database"]
allow {
protocol = "tcp"