resource "oci_core_network_security_group" "load-balancer-public-nsg" {
  compartment_id = var.ocid_compartment_networking
  display_name = "public-load-balancer-nsg"
  vcn_id = var.ocid_vcn_3_tier
}

resource "oci_core_network_security_group_security_rule" "nsg_lb_security_rule_ingress_01" {
  network_security_group_id = oci_core_network_security_group.load-balancer-public-nsg.id
  description = "Ingress internet HTTP"
  direction                 = "INGRESS"
  protocol                  = "6"
  source                    = var.cidr_anywhere
  source_type               = "CIDR_BLOCK"
  tcp_options {
    destination_port_range {
      max = 80
      min = 80
    }
  }
}

resource "oci_core_network_security_group_security_rule" "nsg_lb_security_rule_ingress_02" {
  network_security_group_id = oci_core_network_security_group.load-balancer-public-nsg.id
  description = "Ingress internet HTTPs "
  direction                 = "INGRESS"
  protocol                  = "6"
  source                    = var.cidr_anywhere
  source_type               = "CIDR_BLOCK"
  tcp_options {
    destination_port_range {
      max = 443
      min = 443
    }
  }
}

resource "oci_core_network_security_group_security_rule" "nsg_lb_security_rule_ingress_03" {
  network_security_group_id = oci_core_network_security_group.load-balancer-public-nsg.id
  description = "Ingress internet OnP SOLR."
  direction                 = "INGRESS"
  protocol                  = "6"
  source                    = var.cidr_subnet_app
  source_type               = "CIDR_BLOCK"
  tcp_options {
    destination_port_range {
      max = 8983
      min = 8983
    }
  }
}
#------------------------------------------------------------------------------------------------------------
resource "oci_core_network_security_group_security_rule" "nsg_lb_security_rule_egress_01" {
  network_security_group_id = oci_core_network_security_group.load-balancer-public-nsg.id
  description =  "Egress to app port TCP/443"
  destination =  var.cidr_subnet_app
  destination_type =  "CIDR_BLOCK"
  direction =  "EGRESS"
  protocol =  "6"
  tcp_options  {
    destination_port_range  {
      max =  443
      min =  443
    }
  }
}
resource "oci_core_network_security_group_security_rule" "nsg_lb_security_rule_egress_02" {
  network_security_group_id = oci_core_network_security_group.load-balancer-public-nsg.id
  description =  "Egress to app port TCP/80"
  destination =  var.cidr_subnet_app
  destination_type =  "CIDR_BLOCK"
  direction =  "EGRESS"
  protocol =  "6"
  tcp_options  {
    destination_port_range  {
      max =  80
      min =  80
    }
  }
}
resource "oci_core_network_security_group_security_rule" "nsg_lb_security_rule_egress_03" {
  network_security_group_id = oci_core_network_security_group.load-balancer-public-nsg.id
  description =  "Egress to app port TCP/8983"
  destination =  var.cidr_subnet_app
  destination_type =  "CIDR_BLOCK"
  direction =  "EGRESS"
  protocol =  "6"
  tcp_options  {
    destination_port_range  {
      max =  8983
      min =  8983
    }
  }
}