diff --git a/environments/dev/main.tf b/environments/dev/main.tf new file mode 100644 index 0000000..95db99c --- /dev/null +++ b/environments/dev/main.tf @@ -0,0 +1,52 @@ +terraform { + required_providers { + google = { + source = "hashicorp/google" + version = "~> 6.0" + } + } +} + +provider "google" { + project = var.project_id + region = var.region +} + +module "network" { + source = "./modules/network" + + # Variables d'entrée + project_name = var.project_name + region = var.region + + # Autres variables spécifiques au module + cidr_range = "10.0.0.0/16" +} + +module "network" { + source = "./modules/iam" + + # Variables d'entrée + project_name = var.project_name + region = var.region + + # Autres variables spécifiques au module + cidr_range = "10.0.0.0/16" +} + +module "network" { + source = "./modules/compute" + + # Variables d'entrée + project_name = var.project_name + region = var.region + + # Autres variables spécifiques au module + cidr_range = "10.0.0.0/16" + backend_cidr = var.backend_cidr + frontend_cidr = var.frontend_cidr + database_cidr = var.database_cidr + ssh_source_ranges = var.ssh_source_ranges + zone = var.zone + instance_type = var.instance_type +} \ No newline at end of file diff --git a/environments/dev/outputs.tf b/environments/dev/outputs.tf new file mode 100644 index 0000000..e69de29 diff --git a/environments/dev/variables.tf b/environments/dev/variables.tf new file mode 100644 index 0000000..7407106 --- /dev/null +++ b/environments/dev/variables.tf @@ -0,0 +1,53 @@ +variable "project_id" { + description = "ID du projet GCP" + type = string + default = "97892" +} + +variable "project_name" { + description = "nom_du_projet" + type = string + default = "terraforming" +} + +variable "region" { + description = "emplacement" + type = string + default = "europe-west4" +} + +variable "frontend_cidr" { + description = "addr_front" + type = string + default = "10.0.1.0/24" +} + +variable "backend_cidr" { + description = "addr_back" + type = string + default = "10.0.2.0/24" +} + +variable "database_cidr" { + description = "addr_bdd" + type = string + default = "10.0.3.0/24" +} + +variable "ssh_source_ranges" { + description = "addr_ssh" + type = string + default = "0.0.0.0/0" +} + +variable "instance_type" { + description = "type d'instance" + type = string + default = "e2-micro" +} + +variable "zone" { + description = "zone" + type = string + default = "europe-west4-a" +} diff --git a/modules/compute/main.tf b/modules/compute/main.tf new file mode 100644 index 0000000..b3cd088 --- /dev/null +++ b/modules/compute/main.tf @@ -0,0 +1,72 @@ +resource "google_compute_instance" "vm-front" { + name = "vm-front" + machine_type = var.instance_type + zone = var.zone + + boot_disk { + initialize_params { + image = "debian-cloud/debian-11" + size = 10 + } + } + + network_interface { + subnetwork = google_compute_subnetwork.subnet.id + access_config {} # IP publique + } + + tags = ["web", "ssh"] + + metadata = { + enable-oslogin = "TRUE" + } +} + +resource "google_compute_instance" "vm-back" { + name = "vm-back" + machine_type = var.instance_type + zone = var.zone + + boot_disk { + initialize_params { + image = "debian-cloud/debian-11" + size = 10 + } + } + + network_interface { + subnetwork = google_compute_subnetwork.subnet.id + access_config {} # IP publique + } + + tags = ["backend", "ssh"] + + metadata = { + enable-oslogin = "TRUE" + } +} + +resource "google_compute_instance" "vm-database" { + name = "vm"-database + machine_type = var.instance_type + zone = var.zone + + boot_disk { + initialize_params { + image = "debian-cloud/debian-11" + size = 20 + } + } + + network_interface { + subnetwork = google_compute_subnetwork.subnet.id + access_config {} # IP publique + } + + tags = ["database", "ssh"] + + metadata = { + enable-oslogin = "TRUE" + } +} + diff --git a/modules/compute/outputs.tf b/modules/compute/outputs.tf new file mode 100644 index 0000000..80e1b80 --- /dev/null +++ b/modules/compute/outputs.tf @@ -0,0 +1,4 @@ +# Output +output "instance_ip" { + value = google_compute_instance.main.network_interface[0].access_config[0].nat_ip +} \ No newline at end of file diff --git a/modules/compute/variables.tf b/modules/compute/variables.tf new file mode 100644 index 0000000..34a788d --- /dev/null +++ b/modules/compute/variables.tf @@ -0,0 +1,31 @@ +variable "instance_type" { + description = "type d'instance" + type = string + default = "e2-micro" +} + +variable "zone" { + description = "zone" + type = string + default = "europe-west4-a" +} + +variable "frontend_subnet_id" { + description = "front sub id" + type = string + default = "10.0.1.0/24" +} + +variable "backend_subnet_id" { + description = "back sub id" + type = string + default = "10.0.2.0/24" +} + +variable "database_subnet_id" { + description = "data sub id" + type = string + default = "10.0.3.0/24" +} + + diff --git a/modules/iam/main.tf b/modules/iam/main.tf new file mode 100644 index 0000000..e69de29 diff --git a/modules/iam/outputs.tf b/modules/iam/outputs.tf new file mode 100644 index 0000000..e69de29 diff --git a/modules/iam/variables.tf b/modules/iam/variables.tf new file mode 100644 index 0000000..e69de29 diff --git a/modules/network/main.tf b/modules/network/main.tf index e69de29..0300491 100644 --- a/modules/network/main.tf +++ b/modules/network/main.tf @@ -0,0 +1,77 @@ +resource "google_compute_network" "vpc" { + name = "net1" + auto_create_subnetworks = false +} + +# Sous-réseau +resource "google_compute_subnetwork" "subnet1" { + name = "frontend" + network = google_compute_network.vpc.id + ip_cidr_range = var.frontend_cidr + region = var.region +} + +resource "google_compute_subnetwork" "subnet2" { + name = "backend" + network = google_compute_network.vpc.id + ip_cidr_range = var.backend_cidr + region = var.region + +resource "google_compute_subnetwork" "subnet3" { + name = "database" + network = google_compute_network.vpc.id + ip_cidr_range = var.database_cidr + region = var.region +} + +resource "google_compute_firewall" "allow_http" { + name = "rule-http" + network = google_compute_network.vpc.id + + allow { + protocol = "tcp" + ports = ["80", "443"] + } + + source_ranges = ["0.0.0.0/0"] + target_tags = ["web"] +} + +resource "google_compute_firewall" "allow_ssh" { + name = "allow-ssh" + network = google_compute_network.vpc.id + + allow { + protocol = "tcp" + ports = ["22"] + } + + source_ranges = [var.ssh_source_ranges] + target_tags = ["ssh"] +} + +resource "google_compute_firewall" "front_to_back" { + name = "front_to_back" + network = google_compute_network.vpc.id + + allow { + protocol = "tcp" + ports = ["8000"] + } + + source_tags = ["web"] + target_tags = ["backend"] +} + +resource "google_compute_firewall" "back_to_bdd" { + name = "back_to_bdd" + network = google_compute_network.vpc.id + + allow { + protocol = "tcp" + ports = ["8000"] + } + + source_tags = ["backend"] + target_tags = ["database"] +} \ No newline at end of file diff --git a/modules/network/outputs.tf b/modules/network/outputs.tf index e69de29..80e1b80 100644 --- a/modules/network/outputs.tf +++ b/modules/network/outputs.tf @@ -0,0 +1,4 @@ +# Output +output "instance_ip" { + value = google_compute_instance.main.network_interface[0].access_config[0].nat_ip +} \ No newline at end of file