forked from jmhale/terraform-aws-wireguard
-
Notifications
You must be signed in to change notification settings - Fork 1
/
variables.tf
89 lines (72 loc) · 2.82 KB
/
variables.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
variable "ssh_key_id" {
description = "A SSH public key ID to add to the VPN instance."
}
variable "instance_type" {
default = "t2.micro"
description = "The machine type to launch, some machines may offer higher throughput for higher use cases."
}
variable "asg_min_size" {
default = 1
description = "We may want more than one machine in a scaling group, but 1 is recommended."
}
variable "asg_desired_capacity" {
default = 1
description = "We may want more than one machine in a scaling group, but 1 is recommended."
}
variable "asg_max_size" {
default = 1
description = "We may want more than one machine in a scaling group, but 1 is recommended."
}
variable "vpc_id" {
description = "The VPC ID in which Terraform will launch the resources."
}
variable "subnet_ids" {
type = list(string)
description = "A list of subnets for the Autoscaling Group to use for launching instances. May be a single subnet, but it must be an element in a list."
}
variable "wg_client_public_keys" {
# type = map(string)
description = "List of maps of client IPs and public keys. See Usage in README for details."
}
variable "wg_server_net" {
default = "192.168.2.1/24"
description = "IP range for vpn server - make sure your Client ips are in this range but not the specific ip i.e. not .1"
}
variable "wg_server_port" {
default = 51820
description = "Port for the vpn server."
}
variable "wg_persistent_keepalive" {
default = 25
description = "Persistent Keepalive - useful for helping connection stability over NATs."
}
variable "eip_id" {
default = "disabled"
description = "If we detect the default 'disabled' we avoid the EIP switching code in user-data on wg server startup, if an EIP ID is provided the instance will attempt to switch EIP."
}
variable "additional_security_group_ids" {
type = list(string)
default = [""]
description = "Additional security groups if provided, default empty."
}
variable "target_group_arns" {
type = list(string)
default = null
description = "Running a scaling group behind an LB requires this variable, default null means it won't be included if not set."
}
variable "env" {
default = "prod"
description = "The name of environment for WireGuard. Used to differentiate multiple deployments."
}
variable "wg_server_private_key_param" {
default = "/wireguard/wg-server-private-key"
description = "The SSM parameter containing the WG server private key."
}
variable "ami_id" {
default = null # we check for this and use a data provider since we can't use it here
description = "The AWS AMI to use for the WG server, defaults to the latest Ubuntu 16.04 AMI if not specified."
}
variable "wg_server_interface" {
default = "eth0"
description = "The default interface to forward network traffic to."
}