users/wpcarro/terraform/gcp.tf


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65

provider "google" {
  project = "wpcarros-infrastructure"
  region = "us-central1"
  zone = "us-central1-a"
}

data "google_compute_default_service_account" "default" {}

resource "google_compute_instance" "default" {
  name = "diogenes-2"
  machine_type = "e2-standard-2"
  zone = "us-central1-a"
  hostname = "diogenes.wpcarro.dev"

  tags = [
    "http-server",
    "https-server",
    "diogenes-firewall"
  ]

  boot_disk {
    device_name = "boot"

    initialize_params {
      size = 10
      image = "nixos-20-03"
    }
  }

  network_interface {
    network = "default"
    subnetwork = "default"

    access_config {
      public_ptr_domain_name = "wpcarro.dev"
    }
  }

  metadata = {
    enable-oslogin = "TRUE"
  }

  service_account {
    scopes = ["cloud-platform"]
  }
}

resource "google_compute_firewall" "default" {
  name = "diogenes-firewall"
  network = "default"

  allow {
    protocol = "tcp"
    ports = ["6698"]
  }

  allow {
    protocol = "udp"
    ports = [
      "60000-61000" # mosh
    ]
  }

  source_tags = ["diogenes-firewall"]
}