guilherme.silva/iac-sei
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Minor Improvemnts

Browse Source
This commit is contained in:
Guilherme Silva
2026-09-01 18:45:27 -03:00
parent 4a3c0a8f72
commit 32ea963243
3 changed files with 126 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
fss_server.tf
View File

@@ -12,6 +12,7 @@ resource "oci_file_storage_mount_target" "mount-target-sei" {
display_name = "mount-target-sei-${var.environment}" display_name = "mount-target-sei-${var.environment}"
requested_throughput = "1" requested_throughput = "1"
hostname_label = "sei-fss-${var.environment}" hostname_label = "sei-fss-${var.environment}"
nsg_ids = [ oci_core_network_security_group.fss-servers-nsg.id ]
} }
resource "oci_file_storage_export_set" "dados" { resource "oci_file_storage_export_set" "dados" {

65
nsg-sei-fss.tf Executable file
View File

@@ -0,0 +1,65 @@
resource "oci_core_network_security_group" "fss-servers-nsg" {
compartment_id = var.ocid_compartment_networking
display_name = "fss-nsg"
vcn_id = var.ocid_vcn_3_tier
}
#--------------------------------------------------------------------------------------------------------------------------------------------
resource "oci_core_network_security_group_security_rule" "sei_servers_security_ingress_rule_01" {
network_security_group_id = oci_core_network_security_group.fss-servers-nsg.id
description = "Ingress fss from app-vcn."
source = var.cidr_subnet_app
source_type = "CIDR_BLOCK"
direction = "INGRESS"
protocol = "6"
tcp_options {
destination_port_range {
max = 111
min = 111
}
}
}
resource "oci_core_network_security_group_security_rule" "sei_servers_security_ingress_rule_02" {
network_security_group_id = oci_core_network_security_group.fss-servers-nsg.id
description = "Ingress fss from app-vcn."
source = var.cidr_subnet_app
source_type = "CIDR_BLOCK"
direction = "INGRESS"
protocol = "6"
tcp_options {
destination_port_range {
max = 2050
min = 2048
}
}
}
resource "oci_core_network_security_group_security_rule" "sei_servers_security_ingress_rule_03" {
network_security_group_id = oci_core_network_security_group.fss-servers-nsg.id
description = "Ingress fss from app-vcn."
source = var.cidr_subnet_app
source_type = "CIDR_BLOCK"
direction = "INGRESS"
protocol = "17"
udp_options {
destination_port_range {
max = 111
min = 111
}
}
}
resource "oci_core_network_security_group_security_rule" "sei_servers_security_ingress_rule_04" {
network_security_group_id = oci_core_network_security_group.fss-servers-nsg.id
description = "Ingress fss from app-vcn."
source = var.cidr_subnet_app
source_type = "CIDR_BLOCK"
direction = "INGRESS"
protocol = "17"
udp_options {
destination_port_range {
max = 2048
min = 2050
}
}
}

60
nsg-sei-servers-nsg.tf
View File

@@ -154,4 +154,64 @@ resource "oci_core_network_security_group_security_rule" "sei_servers_security_e
} }
} }
} }
resource "oci_core_network_security_group_security_rule" "sei_servers_security_egress_rule_08" {
network_security_group_id = oci_core_network_security_group.sei-servers-nsg.id
description = "Egress FSS to sn-app"
destination = var.cidr_subnet_app
destination_type = "CIDR_BLOCK"
direction = "EGRESS"
protocol = "6"
tcp_options {
destination_port_range {
max = 111
min = 111
}
}
}
resource "oci_core_network_security_group_security_rule" "sei_servers_security_egress_rule_09" {
network_security_group_id = oci_core_network_security_group.sei-servers-nsg.id
description = "Egress FSS to sn-app"
destination = var.cidr_subnet_app
destination_type = "CIDR_BLOCK"
direction = "EGRESS"
protocol = "6"
tcp_options {
destination_port_range {
max = 2050
min = 2048
}
}
}
resource "oci_core_network_security_group_security_rule" "sei_servers_security_egress_rule_10" {
network_security_group_id = oci_core_network_security_group.sei-servers-nsg.id
description = "Egress FSS to sn-app"
destination = var.cidr_subnet_app
destination_type = "CIDR_BLOCK"
direction = "EGRESS"
protocol = "17"
udp_options {
destination_port_range {
max = 111
min = 111
}
}
}
resource "oci_core_network_security_group_security_rule" "sei_servers_security_egress_rule_11" {
network_security_group_id = oci_core_network_security_group.sei-servers-nsg.id
description = "Egress FSS to sn-app"
destination = var.cidr_subnet_app
destination_type = "CIDR_BLOCK"
direction = "EGRESS"
protocol = "17"
udp_options {
destination_port_range {
max = 2050
min = 2048
}
}
}
#-------------------------------------------------------------------------------------------------------------------------------------------- #--------------------------------------------------------------------------------------------------------------------------------------------