diff --git a/nsg-sei-lbs-nsg.tf b/nsg-sei-lbs-nsg.tf index ecb794d..2a97b49 100755 --- a/nsg-sei-lbs-nsg.tf +++ b/nsg-sei-lbs-nsg.tf @@ -48,4 +48,46 @@ resource "oci_core_network_security_group_security_rule" "nsg_lbr_security_rule_ } } } -#------------------------------------------------------------------------------------------------------------ \ No newline at end of file +#------------------------------------------------------------------------------------------------------------ +resource "oci_core_network_security_group_security_rule" "nsg_lbr_security_rule_ingress_01" { + network_security_group_id = oci_core_network_security_group.load-balancer-public-nsg.id + description = "Egress to app port TCP/443" + destination = var.cidr_subnet_app + destination_type = "CIDR_BLOCK" + direction = "EGRESS" + protocol = "6" + tcp_options { + destination_port_range { + max = 443 + min = 443 + } + } +} +resource "oci_core_network_security_group_security_rule" "nsg_lbr_security_rule_ingress_02" { + network_security_group_id = oci_core_network_security_group.load-balancer-public-nsg.id + description = "Egress to app port TCP/80" + destination = var.cidr_subnet_app + destination_type = "CIDR_BLOCK" + direction = "EGRESS" + protocol = "6" + tcp_options { + destination_port_range { + max = 80 + min = 80 + } + } +} +resource "oci_core_network_security_group_security_rule" "nsg_lbr_security_rule_ingress_03" { + network_security_group_id = oci_core_network_security_group.load-balancer-public-nsg.id + description = "Egress to app port TCP/8983" + destination = var.cidr_subnet_app + destination_type = "CIDR_BLOCK" + direction = "EGRESS" + protocol = "6" + tcp_options { + destination_port_range { + max = 8983 + min = 8983 + } + } +} \ No newline at end of file