mirror of
https://github.com/idanoo/fediservices.nz-infra
synced 2025-07-01 05:42:14 +00:00
40 lines
1 KiB
HCL
40 lines
1 KiB
HCL
# Security groups to access database1.apse2
|
|
resource "aws_security_group" "sg" {
|
|
name = var.domain
|
|
description = var.domain
|
|
|
|
vpc_id = aws_vpc.vpc.id
|
|
}
|
|
|
|
# Allow out
|
|
resource "aws_security_group_rule" "allow_egress" {
|
|
security_group_id = aws_security_group.sg.id
|
|
type = "egress"
|
|
from_port = 0
|
|
to_port = 0
|
|
protocol = "-1"
|
|
cidr_blocks = ["0.0.0.0/0"]
|
|
ipv6_cidr_blocks = ["::/0"]
|
|
}
|
|
|
|
# Allow HTTP traffic
|
|
resource "aws_security_group_rule" "http" {
|
|
security_group_id = aws_security_group.sg.id
|
|
type = "ingress"
|
|
from_port = 80
|
|
to_port = 80
|
|
protocol = "tcp"
|
|
cidr_blocks = ["0.0.0.0/0"]
|
|
ipv6_cidr_blocks = ["::/0"]
|
|
}
|
|
|
|
# Allow HTTPS traffic
|
|
resource "aws_security_group_rule" "https" {
|
|
security_group_id = aws_security_group.sg.id
|
|
type = "ingress"
|
|
from_port = 443
|
|
to_port = 443
|
|
protocol = "tcp"
|
|
cidr_blocks = ["0.0.0.0/0"]
|
|
ipv6_cidr_blocks = ["::/0"]
|
|
}
|