diff options
| author | Egor Tensin <egor@tensin.name> | 2026-08-08 16:01:27 +0200 |
|---|---|---|
| committer | Egor Tensin <egor@tensin.name> | 2026-08-08 16:01:27 +0200 |
| commit | a0e21763dcde280b0deda92d771a86f6c7a097da (patch) | |
| tree | 686158dac74befa5ed33194f79a37254affc507f | |
| parent | move away from reserved IPs for DO (diff) | |
| download | infra-terraform-master.tar.gz infra-terraform-master.zip | |
| -rw-r--r-- | digitalocean/firewall/main.tf | 44 | ||||
| -rw-r--r-- | digitalocean/firewall/providers.tf | 8 | ||||
| -rw-r--r-- | digitalocean/firewall/variables.tf | 10 | ||||
| -rw-r--r-- | yandex/firewall/main.tf | 25 | ||||
| -rw-r--r-- | yandex/firewall/outputs.tf | 3 | ||||
| -rw-r--r-- | yandex/firewall/providers.tf | 7 | ||||
| -rw-r--r-- | yandex/firewall/variables.tf | 9 |
7 files changed, 0 insertions, 106 deletions
diff --git a/digitalocean/firewall/main.tf b/digitalocean/firewall/main.tf deleted file mode 100644 index b0a435a..0000000 --- a/digitalocean/firewall/main.tf +++ /dev/null @@ -1,44 +0,0 @@ -resource "digitalocean_firewall" "this" { - name = var.name - droplet_ids = var.droplet_ids - - inbound_rule { - protocol = "icmp" - source_addresses = ["0.0.0.0/0", "::/0"] - } - outbound_rule { - protocol = "icmp" - destination_addresses = ["0.0.0.0/0", "::/0"] - } - - dynamic "inbound_rule" { - for_each = var.open_ports - - content { - protocol = "tcp" - port_range = inbound_rule.value - source_addresses = ["0.0.0.0/0", "::/0"] - } - } - - dynamic "inbound_rule" { - for_each = var.open_ports - - content { - protocol = "udp" - port_range = inbound_rule.value - source_addresses = ["0.0.0.0/0", "::/0"] - } - } - - outbound_rule { - protocol = "tcp" - port_range = "1-65535" - destination_addresses = ["0.0.0.0/0", "::/0"] - } - outbound_rule { - protocol = "udp" - port_range = "1-65535" - destination_addresses = ["0.0.0.0/0", "::/0"] - } -} diff --git a/digitalocean/firewall/providers.tf b/digitalocean/firewall/providers.tf deleted file mode 100644 index 68aba8c..0000000 --- a/digitalocean/firewall/providers.tf +++ /dev/null @@ -1,8 +0,0 @@ -terraform { - required_providers { - digitalocean = { - source = "digitalocean/digitalocean" - version = "~> 2.0" - } - } -} diff --git a/digitalocean/firewall/variables.tf b/digitalocean/firewall/variables.tf deleted file mode 100644 index 6512f00..0000000 --- a/digitalocean/firewall/variables.tf +++ /dev/null @@ -1,10 +0,0 @@ -variable "name" { - type = string -} -variable "open_ports" { - type = list(string) - default = ["22"] -} -variable "droplet_ids" { - type = list(string) -} diff --git a/yandex/firewall/main.tf b/yandex/firewall/main.tf deleted file mode 100644 index 81dc26a..0000000 --- a/yandex/firewall/main.tf +++ /dev/null @@ -1,25 +0,0 @@ -resource "yandex_vpc_security_group" "this" { - network_id = var.vpc_id - - name = var.name - - ingress { - protocol = "ICMP" - v4_cidr_blocks = ["0.0.0.0/0"] - } - - dynamic "ingress" { - for_each = var.open_ports - - content { - protocol = "ANY" - v4_cidr_blocks = ["0.0.0.0/0"] - port = ingress.value - } - } - - egress { - protocol = "ANY" - v4_cidr_blocks = ["0.0.0.0/0"] - } -} diff --git a/yandex/firewall/outputs.tf b/yandex/firewall/outputs.tf deleted file mode 100644 index 72058aa..0000000 --- a/yandex/firewall/outputs.tf +++ /dev/null @@ -1,3 +0,0 @@ -output "id" { - value = yandex_vpc_security_group.this.id -} diff --git a/yandex/firewall/providers.tf b/yandex/firewall/providers.tf deleted file mode 100644 index 3a5782f..0000000 --- a/yandex/firewall/providers.tf +++ /dev/null @@ -1,7 +0,0 @@ -terraform { - required_providers { - yandex = { - source = "yandex-cloud/yandex" - } - } -} diff --git a/yandex/firewall/variables.tf b/yandex/firewall/variables.tf deleted file mode 100644 index 04e111a..0000000 --- a/yandex/firewall/variables.tf +++ /dev/null @@ -1,9 +0,0 @@ -variable "name" { - type = string -} -variable "vpc_id" { - type = string -} -variable "open_ports" { - type = list(number) -} |