Tips-Of-Mine/terraform-azure
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update files

Browse Source
This commit is contained in:
cshea15 2023-09-25 10:39:55 -04:00
parent 02691ea927
commit 06cb833672
1 changed files with 45 additions and 43 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

88
quickstart/201-azfw-with-avzones/main.tf
View File

@ -30,6 +30,7 @@ resource "azurerm_public_ip" "pip_azfw" {
resource_group_name = azurerm_resource_group.rg.name resource_group_name = azurerm_resource_group.rg.name
allocation_method = "Static" allocation_method = "Static"
sku = "Standard" sku = "Standard"
zones = [ "1", "2", "3" ]
} }
resource "azurerm_storage_account" "sa" { resource "azurerm_storage_account" "sa" {
@ -135,19 +136,19 @@ resource "azurerm_network_interface_security_group_association" "vm_jump_nsg_ass
network_security_group_id = azurerm_network_security_group.vm_jump_nsg.id network_security_group_id = azurerm_network_security_group.vm_jump_nsg.id
} }
resource "azurerm_linux_virtual_machine" "vm_server" { resource "azurerm_windows_virtual_machine" "vm_server" {
name = "server-vm" name = "server-vm"
resource_group_name = azurerm_resource_group.rg.name resource_group_name = azurerm_resource_group.rg.name
location = azurerm_resource_group.rg.location location = azurerm_resource_group.rg.location
computer_name = "server" computer_name = "server"
size = var.virtual_machine_size size = var.virtual_machine_size
admin_username = var.admin_username admin_username = var.admin_username
admin_password = random_password.password.result admin_password = random_password.password.result
network_interface_ids = [azurerm_network_interface.vm_server_nic.id] network_interface_ids = [azurerm_network_interface.vm_server_nic.id]
os_disk { os_disk {
caching = "ReadWrite" caching = "ReadWrite"
storage_account_type = "Standard_LRS" storage_account_type = "Standard_LRS"
disk_size_gb = "128" disk_size_gb = "128"
} }
source_image_reference { source_image_reference {
publisher = "MicrosoftWindowsServer" publisher = "MicrosoftWindowsServer"
@ -160,19 +161,19 @@ resource "azurerm_linux_virtual_machine" "vm_server" {
} }
} }
resource "azurerm_linux_virtual_machine" "vm_jump" { resource "azurerm_windows_virtual_machine" "vm_jump" {
name = "jump-vm" name = "jump-vm"
resource_group_name = azurerm_resource_group.rg.name resource_group_name = azurerm_resource_group.rg.name
location = azurerm_resource_group.rg.location location = azurerm_resource_group.rg.location
computer_name = "jumpbox" computer_name = "jumpbox"
size = var.virtual_machine_size size = var.virtual_machine_size
admin_username = var.admin_username admin_username = var.admin_username
admin_password = random_password.password.result admin_password = random_password.password.result
network_interface_ids = [azurerm_network_interface.vm_jump_nic.id] network_interface_ids = [azurerm_network_interface.vm_jump_nic.id]
os_disk { os_disk {
caching = "ReadWrite" caching = "ReadWrite"
storage_account_type = "Standard_LRS" storage_account_type = "Standard_LRS"
disk_size_gb = "128" disk_size_gb = "128"
} }
source_image_reference { source_image_reference {
publisher = "MicrosoftWindowsServer" publisher = "MicrosoftWindowsServer"
@ -194,36 +195,37 @@ resource "azurerm_firewall_policy" "azfw_policy" {
} }
resource "azurerm_firewall_policy_rule_collection_group" "prcg" { resource "azurerm_firewall_policy_rule_collection_group" "prcg" {
name = "prcg" name = "prcg"
firewall_policy_id = azurerm_firewall_policy.azfw_policy.id firewall_policy_id = azurerm_firewall_policy.azfw_policy.id
priority = 300 priority = 300
application_rule_collection { application_rule_collection {
name = "appRc1" name = "appRc1"
priority = 101 priority = 101
action = "Allow" action = "Allow"
rule { rule {
name = "appRule1" name = "appRule1"
protocols { protocols {
type = "Http" type = "Http"
port = 80 port = 80
} }
protocols { protocols {
type = "Https" type = "Https"
port = 443 port = 443
} }
destination_fqdns = [ "www.microsoft.com" ] destination_fqdns = ["www.microsoft.com"]
source_addresses = ["10.10.1.0/24"] source_addresses = ["10.10.1.0/24"]
} }
} }
network_rule_collection { network_rule_collection {
name = "netRc1" name = "netRc1"
priority = 200 priority = 200
action = "Allow" action = "Allow"
rule { rule {
name = "netRule1" name = "netRule1"
protocols = [ "TCP" ] protocols = ["TCP"]
source_addresses = [ "10.10.1.0/24" ] source_addresses = ["10.10.1.0/24"]
destination_ports = [ "8000", "8999" ] destination_addresses = [ "*" ]
destination_ports = ["8000", "8999"]
} }
} }
} }
@ -234,7 +236,7 @@ resource "azurerm_firewall" "fw" {
resource_group_name = azurerm_resource_group.rg.name resource_group_name = azurerm_resource_group.rg.name
sku_name = "AZFW_VNet" sku_name = "AZFW_VNet"
sku_tier = var.firewall_sku_tier sku_tier = var.firewall_sku_tier
zones = ["1", "2", "3"] zones = ["1", "2", "3"]
ip_configuration { ip_configuration {
name = "azfw-ipconfig" name = "azfw-ipconfig"
subnet_id = azurerm_subnet.azfw_subnet.id subnet_id = azurerm_subnet.azfw_subnet.id