Skip to content

Commit 40b9751

Browse files
committed
move instances to public subnet
disable nat and internet gateway
1 parent d04175b commit 40b9751

File tree

1 file changed

+10
-9
lines changed

1 file changed

+10
-9
lines changed

auto-drive/main.tf

Lines changed: 10 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -29,14 +29,15 @@ locals {
2929
module "vpc" {
3030
source = "../templates/terraform/aws/vpc"
3131

32-
name = "${local.name}-vpc"
33-
cidr = var.vpc_cidr
34-
azs = local.azs
35-
private_subnets = ["10.0.1.0/24", "10.0.2.0/24", "10.0.3.0/24"]
36-
public_subnets = ["10.0.101.0/24", "10.0.102.0/24", "10.0.103.0/24"]
32+
name = "${local.name}-vpc"
33+
cidr = var.vpc_cidr
34+
azs = local.azs
35+
public_subnets = ["10.0.101.0/24", "10.0.102.0/24", "10.0.103.0/24"]
3736

38-
enable_nat_gateway = true
39-
single_nat_gateway = true
37+
# Configure NAT gateways and private subnets settings
38+
enable_nat_gateway = false # Set to true to use NAT gateways and private subnets without public IPs
39+
single_nat_gateway = false # Set to true to use a single NAT gateway
40+
enable_internet_gateway = false
4041

4142
tags = local.tags
4243
}
@@ -126,7 +127,7 @@ module "ec2_auto_drive" {
126127
ami = data.aws_ami.ubuntu_amd64.id
127128
instance_type = var.auto_drive_instance_type
128129
availability_zone = element(module.vpc.azs, 0)
129-
subnet_id = element(module.vpc.private_subnets, 0)
130+
subnet_id = element(module.vpc.public_subnets, 0)
130131
vpc_security_group_ids = [aws_security_group.auto_drive_sg.id]
131132
associate_public_ip_address = false # Gateway instances use EIPs
132133
create_eip = true
@@ -165,7 +166,7 @@ module "ec2_gateway" {
165166
ami = data.aws_ami.ubuntu_amd64.id
166167
instance_type = var.gateway_instance_type
167168
availability_zone = element(module.vpc.azs, 0)
168-
subnet_id = element(module.vpc.private_subnets, 0)
169+
subnet_id = element(module.vpc.public_subnets, 0)
169170
vpc_security_group_ids = [aws_security_group.auto_drive_sg.id]
170171
associate_public_ip_address = false # Gateway instances use EIPs
171172
create_eip = true

0 commit comments

Comments
 (0)