mharb/tf-oci-ans-selfhost-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add easy way to expose subnet to the public.

Browse Source 
This is a quality of life fix. A single boolean controls whether public HTTP(S) traffic reaches your infrastructure.
This commit is contained in:
mharb 2023-10-04 11:06:31 -04:00
parent e3478a6748
commit d54f008c62
3 changed files with 12 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
terraform_plans/network-subnet-public.tf
View File

@ -45,10 +45,10 @@ resource "oci_core_security_list" "public-security-list" {
ingress_security_rules { ingress_security_rules {
stateless = false stateless = false
source = var.ssh_allow_range source = var.go_live ? "0.0.0.0/0" : var.ssh_allow_range
source_type = "CIDR_BLOCK" source_type = "CIDR_BLOCK"
protocol = "6" protocol = "6"
description = "HTTP traffic" description = "HTTPs traffic"
tcp_options { tcp_options {
min = 443 min = 443
@ -58,10 +58,10 @@ resource "oci_core_security_list" "public-security-list" {
ingress_security_rules { ingress_security_rules {
stateless = false stateless = false
source = var.ssh_allow_range source = var.go_live ? "0.0.0.0/0" : var.ssh_allow_range
source_type = "CIDR_BLOCK" source_type = "CIDR_BLOCK"
protocol = "6" protocol = "6"
description = "HTTPs traffic" description = "HTTP traffic"
tcp_options { tcp_options {
min = 80 min = 80

3
terraform_plans/tfvars.skel
View File

@ -11,9 +11,10 @@ vm_image_ocid_x86_64 =
vm_image_ocid_ampere = vm_image_ocid_ampere =
# Add your SSH key here # Add your SSH key here
ssh_public_key = ssh_public_key =
# Optional: Replace this with your preferred environment name # Optional: Replace this with your preferred environment name
compartment_name = compartment_name =
vm_name = vm_name =
tags = tags =
ssh_allow_range = ssh_allow_range =
go_live =

6
terraform_plans/variables.tf
View File

@ -55,6 +55,12 @@ variable "ssh_allow_range" {
default = "10.0.0.0/24" default = "10.0.0.0/24"
} }
variable "go_live" {
description = "A value of 'true' opens port 80 and 443 to all traffic from the internet."
type = bool
default = false
}
variable "tags" { variable "tags" {
description = "Freeform tags." description = "Freeform tags."
type = map(any) type = map(any)