TP7virtu/tp-cloud/terraform/modules/network/main.tf

77 lines
1.6 KiB
Terraform
Raw Normal View History

2024-12-04 16:11:44 +01:00
resource "google_compute_network" "vpc" {
name = "monvpc"
auto_create_subnetworks = false
}
resource "google_compute_subnetwork" "frontend" {
name = "frontend"
network = google_compute_network.vpc.id
ip_cidr_range = var.frontend_cidr
region = var.region
}
resource "google_compute_subnetwork" "backend" {
name = "frontend"
network = google_compute_network.vpc.id
ip_cidr_range = var.backend_cidr
region = var.region
}
resource "google_compute_subnetwork" "database" {
2024-12-04 16:17:39 +01:00
name = "database"
2024-12-04 16:11:44 +01:00
network = google_compute_network.vpc.id
ip_cidr_range = var.database_cidr
region = var.region
}
2024-12-04 16:30:20 +01:00
resource "google_compute_firewall" "AllowHttpHttps" {
name = "AllowHttpHttps"
2024-12-04 16:11:44 +01:00
network = google_compute_network.vpc.id
allow {
protocol = "tcp"
ports = ["80", "443"]
}
source_ranges = ["0.0.0.0/0"]
target_tags = ["web"]
}
2024-12-04 16:30:20 +01:00
resource "google_compute_firewall" "AllowSsh" {
name = "AllowSsh"
2024-12-04 16:11:44 +01:00
network = google_compute_network.vpc.id
allow {
protocol = "tcp"
ports = ["22"]
}
source_ranges = var.ssh_source_ranges
target_tags = ["web"]
}
2024-12-04 16:30:20 +01:00
resource "google_compute_firewall" "FrontToBack" {
name = "FrontToBack"
2024-12-04 16:11:44 +01:00
network = google_compute_network.vpc.id
allow {
protocol = "tcp"
ports = ["8000"]
}
source_ranges = var.frontend_cidr
target_tags = ["backend"]
}
2024-12-04 16:30:20 +01:00
resource "google_compute_firewall" "BackToDb" {
name = "BackToDb"
2024-12-04 16:11:44 +01:00
network = google_compute_network.vpc.id
allow {
protocol = "tcp"
ports = ["3306"]
}
source_ranges = var.backend_cidr
target_tags = ["database"]
}