From a8f17044b56d395bb8cd9fcedd237b2d4fc5ba8d Mon Sep 17 00:00:00 2001
From: Pedro Alvarez <pedro.alvarez@codethink.co.uk>
Date: Tue, 17 Aug 2021 14:26:01 +0200
Subject: more security groups

---
 terraform/infra.tf | 78 ++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 78 insertions(+)

diff --git a/terraform/infra.tf b/terraform/infra.tf
index c413239e..36f10126 100644
--- a/terraform/infra.tf
+++ b/terraform/infra.tf
@@ -107,6 +107,84 @@ resource "openstack_networking_secgroup_rule_v2" "sg_base_ingress_ssh" {
   security_group_id = "${openstack_networking_secgroup_v2.sg_base.id}"
 }
 
+
+
+resource "openstack_networking_secgroup_v2" "sg_haste_server" {
+  name        = "haste-server"
+  description = "Allow incoming TCP requests for haste server"
+  delete_default_rules = "true"
+}
+
+resource "openstack_networking_secgroup_rule_v2" "sg_haste_server_main" {
+  direction         = "ingress"
+  ethertype         = "IPv4"
+  protocol          = "tcp"
+  port_range_min    = 7777
+  port_range_max    = 7777
+  remote_ip_prefix  = "0.0.0.0/0"
+  security_group_id = "${openstack_networking_secgroup_v2.sg_haste_server.id}"
+}
+
+resource "openstack_networking_secgroup_v2" "sg_gitlab_bot" {
+  name        = "gitlab-bot"
+  description = "Allow incoming TCP requests for gitlab-bot"
+  delete_default_rules = "true"
+}
+
+
+resource "openstack_networking_secgroup_rule_v2" "sg_gitlab_bot_main" {
+  direction         = "ingress"
+  ethertype         = "IPv4"
+  protocol          = "tcp"
+  port_range_min    = 1337
+  port_range_max    = 1337
+  remote_ip_prefix  = "0.0.0.0/0"
+  security_group_id = "${openstack_networking_secgroup_v2.sg_gitlab_bot.id}"
+}
+
+
+resource "openstack_networking_secgroup_v2" "sg_git_server" {
+  name        = "git-server"
+  description = "Allow inbound SSH, HTTP, HTTPS and Git requests."
+  delete_default_rules = "true"
+}
+
+resource "openstack_networking_secgroup_rule_v2" "sg_git_server_http" {
+  direction         = "ingress"
+  ethertype         = "IPv4"
+  protocol          = "tcp"
+  port_range_min    = 80
+  port_range_max    = 80
+  remote_ip_prefix  = "0.0.0.0/0"
+  security_group_id = "${openstack_networking_secgroup_v2.sg_git_server.id}"
+}
+
+resource "openstack_networking_secgroup_rule_v2" "sg_git_server_https" {
+  direction         = "ingress"
+  ethertype         = "IPv4"
+  protocol          = "tcp"
+  port_range_min    = 443
+  port_range_max    = 443
+  remote_ip_prefix  = "0.0.0.0/0"
+  security_group_id = "${openstack_networking_secgroup_v2.sg_git_server.id}"
+}
+
+resource "openstack_networking_secgroup_rule_v2" "sg_git_server_git" {
+  direction         = "ingress"
+  ethertype         = "IPv4"
+  protocol          = "tcp"
+  port_range_min    = 9418
+  port_range_max    = 9418
+  remote_ip_prefix  = "0.0.0.0/0"
+  security_group_id = "${openstack_networking_secgroup_v2.sg_git_server.id}"
+}
+
+
+
+
+
+
+
 resource "openstack_networking_port_v2" "frontend_port" {
   name               = "port_1"
   network_id         = "${openstack_networking_network_v2.baserock_network.id}"
-- 
cgit v1.2.1