Skip to content

Commit

Permalink
Import Mailu security group into Terraform
Browse files Browse the repository at this point in the history
  • Loading branch information
strugee committed Mar 13, 2024
1 parent c5ad825 commit eabddb9
Showing 1 changed file with 40 additions and 2 deletions.
42 changes: 40 additions & 2 deletions mailu.tf
Original file line number Diff line number Diff line change
@@ -1,9 +1,47 @@
resource "openstack_networking_secgroup_v2" "mailu" {
name = "mailu"
delete_default_rules = true
}

resource "openstack_networking_secgroup_rule_v2" "mailu-ipv4-egress" {
direction = "egress"
ethertype = "IPv4"
remote_ip_prefix = "0.0.0.0/0"
security_group_id = openstack_networking_secgroup_v2.mailu.id
}

resource "openstack_networking_secgroup_rule_v2" "mailu-ipv6-egress" {
direction = "egress"
ethertype = "IPv6"
remote_ip_prefix = "::/0"
security_group_id = openstack_networking_secgroup_v2.mailu.id
}

resource "openstack_networking_secgroup_rule_v2" "mailu-icmp4-ingress" {
direction = "ingress"
ethertype = "IPv4"
protocol = "icmp"
remote_ip_prefix = "0.0.0.0/0"
security_group_id = openstack_networking_secgroup_v2.mailu.id
}

resource "openstack_networking_secgroup_rule_v2" "mailu-tcp4-ingress" {
for_each = toset(["22", "25", "80", "110", "143", "443", "465", "587", "993", "995"])
direction = "ingress"
ethertype = "IPv4"
protocol = "tcp"
port_range_min = each.value
port_range_max = each.value
remote_ip_prefix = "0.0.0.0/0"
security_group_id = openstack_networking_secgroup_v2.mailu.id
}

resource "openstack_compute_instance_v2" "mailu" {
name = "mailu"
flavor_name = "m1.medium"
key_pair = "AJ OpenStack bootstrap" # TODO lol
security_groups = [
"mailu" # TODO import this
openstack_networking_secgroup_v2.mailu.name
]

block_device {
Expand All @@ -15,6 +53,6 @@ resource "openstack_compute_instance_v2" "mailu" {
}

network {
name = "general_servers2"
name = "general_servers2"
}
}

0 comments on commit eabddb9

Please sign in to comment.