[root@ngame-web01-dev 2]# more *.tf
::::::::::::::
main.tf
::::::::::::::
# VPC > User scenario > Scenario 1. Single Public Subnet
# https://docs.ncloud.com/ko/networking/vpc/vpc_userscenario1.html

provider "ncloud" {
  support_vpc = true
  region      = "KR"
  access_key  = var.access_key
  secret_key  = var.secret_key
}
resource "ncloud_login_key" "key_scn_01" {
  key_name = var.name_vpc1
}

resource "ncloud_vpc" "vpc_vpc1" {
  name            = var.name_vpc1
  ipv4_cidr_block = "10.0.0.0/21"
}

resource "ncloud_subnet" "subnet_pri1" {
  name           = var.name_pri1
  vpc_no         = ncloud_vpc.vpc_vpc1.id
  subnet         = cidrsubnet(ncloud_vpc.vpc_vpc1.ipv4_cidr_block, 2, 0)
  // 10.0.1.0/24
  zone           = "KR-1"
  network_acl_no = ncloud_vpc.vpc_vpc1.default_network_acl_no
  subnet_type    = "PRIVATE"
  // PUBLIC(Public) | PRIVATE(Private)
}
resource "ncloud_subnet" "subnet_pub1" {
  name           = var.name_pub1
  vpc_no         = ncloud_vpc.vpc_vpc1.id
  subnet         = cidrsubnet(ncloud_vpc.vpc_vpc1.ipv4_cidr_block, 3, 2)
  // 10.0.1.0/24
  zone           = "KR-1"
  network_acl_no = ncloud_vpc.vpc_vpc1.default_network_acl_no
  subnet_type    = "PUBLIC"
  // PUBLIC(Public) | PRIVATE(Private)
}

resource "ncloud_server" "server_web1" {
  subnet_no                 = ncloud_subnet.subnet_pub1.id
  name                      = var.name_web1
  server_image_product_code = "SW.VSVR.OS.LNX64.CNTOS.0703.B050"
  login_key_name            = ncloud_login_key.key_scn_01.key_name
}

resource "ncloud_public_ip" "public_ip_web1" {
  server_instance_no = ncloud_server.server_web1.id
  description        = "for ${var.name_web1}"
}

locals {
  scn01_inbound = [
    [1, "TCP", "0.0.0.0/0", "80", "ALLOW"],
    [2, "TCP", "0.0.0.0/0", "443", "ALLOW"],
    [3, "TCP", "${var.client_ip}/32", "22", "ALLOW"],
    [4, "TCP", "${var.client_ip}/32", "3389", "ALLOW"],
    [5, "TCP", "0.0.0.0/0", "32768-65535", "ALLOW"],
    [197, "TCP", "0.0.0.0/0", "1-65535", "DROP"],
    [198, "UDP", "0.0.0.0/0", "1-65535", "DROP"],
    [199, "ICMP", "0.0.0.0/0", null, "DROP"],
  ]

  scn01_outbound = [
    [1, "TCP", "0.0.0.0/0", "80", "ALLOW"],
    [2, "TCP", "0.0.0.0/0", "443", "ALLOW"],
    [3, "TCP", "${var.client_ip}/32", "1000-65535", "ALLOW"],
    [197, "TCP", "0.0.0.0/0", "1-65535", "DROP"],
    [198, "UDP", "0.0.0.0/0", "1-65535", "DROP"],
    [199, "ICMP", "0.0.0.0/0", null, "DROP"]
  ]
}

resource "ncloud_network_acl_rule" "network_acl_01_rule" {
  network_acl_no = ncloud_vpc.vpc_vpc1.default_network_acl_no
  dynamic "inbound" {
    for_each = local.scn01_inbound
    content {
      priority    = inbound.value[0]
      protocol    = inbound.value[1]
      ip_block    = inbound.value[2]
      port_range  = inbound.value[3]
      rule_action = inbound.value[4]
      description = "for ${var.name_vpc1}"
    }
  }

  dynamic "outbound" {
    for_each = local.scn01_outbound
    content {
      priority    = outbound.value[0]
      protocol    = outbound.value[1]
      ip_block    = outbound.value[2]
      port_range  = outbound.value[3]
      rule_action = outbound.value[4]
      description = "for ${var.name_vpc1}"
    }
  }
}
::::::::::::::
variables.tf
::::::::::::::


# variable name_scn01 {
#  default = "ngame-vpc2"
# }

variable name_vpc1 {
  default = "ngame-vpc2"
}

variable name_pri1 {
  default = "ngame-pri1"
}

variable name_pub1 {
  default = "ngame-pub1"
}

variable name_web1 {
  default = "ngame-web01"
}

variable name_pubip1 {
  default = "ngame-pubip11"
}

variable client_ip {
  default = "2.2.2.2"
}

variable access_key {
  default = "ncp_iam_BPAMsp5"
}

variable secret_key {
  default = "ncp_iam_BPKMKW50nQ"
}
::::::::::::::
versions.tf
::::::::::::::
terraform {
  required_providers {
    ncloud = {
      source = "navercloudplatform/ncloud"
    }
  }
  required_version = ">= 0.13"
}
[root@ngame-web01-dev 2]#