28 lines
816 B
HCL
28 lines
816 B
HCL
// Set up network for compute to live.
|
|
resource "hcloud_network" "net" {
|
|
name = "Private Network"
|
|
ip_range = local.net-cidr
|
|
}
|
|
|
|
// Set up private subnet, for compute.
|
|
resource "hcloud_network_subnet" "subnet" {
|
|
network_id = hcloud_network.net.id
|
|
type = "cloud"
|
|
network_zone = "eu-central"
|
|
ip_range = local.subnet-cidr
|
|
}
|
|
|
|
// Provide internet to the private servers, by sending all internet traffic to
|
|
// the NAT.
|
|
resource "hcloud_network_route" "gateway" {
|
|
network_id = hcloud_network.net.id
|
|
destination = "0.0.0.0/0"
|
|
gateway = local.nat-private-ip
|
|
}
|
|
|
|
// A managed certificate for the domain, to be used by the load balancer.
|
|
resource "hcloud_managed_certificate" "managed_cert" {
|
|
name = "Main Certificate"
|
|
domain_names = ["*.${local.domain}", "${local.domain}"]
|
|
}
|