vnet-dev-ussc.tf

#================    VNET    ================
resource "azurerm_virtual_network" "vnet-dev-ussc" {
  name                = "vnet-dev-ussc-10.0.4.0_24"
  resource_group_name = azurerm_resource_group.rg-network.name
  location            = "southcentralus"
  address_space       = ["10.0.4.0/24"]
  dns_servers         = concat(local.settings.adds.ussc-adds-ip_address, local.settings.adds.euw-adds-ip_address)

  # ddos_protection_plan {
  #   id     = azurerm_network_ddos_protection_plan.ddos-plan.id
  #   enable = true
  # }

  tags = merge(local.settings.common_tags, local.settings.dev_tags)
}

resource "azurerm_subnet" "subnet-ussc-dev-fe" {
  name                 = "subnet-ussc-dev-vnet1-fe-10.0.4.0_27"
  address_prefixes     = ["10.0.4.0/27"]
  resource_group_name  = azurerm_resource_group.rg-network.name
  virtual_network_name = azurerm_virtual_network.vnet-dev-ussc.name
  service_endpoints    = ["Microsoft.KeyVault", "Microsoft.Storage"]
}

resource "azurerm_subnet" "subnet-ussc-dev-be" {
  name                 = "subnet-ussc-dev-vnet1-be-10.0.4.32_27"
  address_prefixes     = ["10.0.4.32/27"]
  resource_group_name  = azurerm_resource_group.rg-network.name
  virtual_network_name = azurerm_virtual_network.vnet-dev-ussc.name
  service_endpoints    = ["Microsoft.KeyVault", "Microsoft.Storage"]
}


#================    NSGs    ================
resource "azurerm_network_security_group" "nsg-ussc-dev-fe" {
  name                = "subnet-ussc-dev-vnet1-fe-nsg"
  resource_group_name = azurerm_resource_group.rg-network.name
  location            = "southcentralus"
}

resource "azurerm_subnet_network_security_group_association" "nsg-ussc-dev-fe" {
  subnet_id                 = azurerm_subnet.subnet-ussc-dev-fe.id
  network_security_group_id = azurerm_network_security_group.nsg-ussc-dev-fe.id
}

resource "azurerm_network_security_group" "nsg-ussc-dev-be" {
  name                = "subnet-ussc-dev-vnet1-be-nsg"
  resource_group_name = azurerm_resource_group.rg-network.name
  location            = "southcentralus"
}

resource "azurerm_subnet_network_security_group_association" "nsg-ussc-dev-be" {
  subnet_id                 = azurerm_subnet.subnet-ussc-dev-be.id
  network_security_group_id = azurerm_network_security_group.nsg-ussc-dev-be.id
}


#================    VWAN Connection    ================
resource "azurerm_virtual_hub_connection" "vnet-dev-ussc-hub2-connection" {
  name                      = "vnet-dev-ussc-hub2-connection"
  virtual_hub_id            = azurerm_virtual_hub.vwan-ussc-hub2.id
  remote_virtual_network_id = azurerm_virtual_network.vnet-dev-ussc.id
}