bastion.tf

module "bastion-node" {
  source          = "./modules/tf_hetzner_servers"
  network_id      = module.network.network_id
  instance_count  = local.config.common_instance_count
  name            = "bastion-${local.env}"
  server_type     = local.config.common_server_type
  labels          = local.standard_tags
  image           = local.config.common_image
  disk_format     = local.config.common_disk_format
  disk_size       = local.config.common_disk_size
  ssh_keys        = local.config.common_ssh_keys
  attach_firewall = true
  subnet_ids = module.network.public_subnet_id
  #subnet_id_range = local.config.public_subnet_ip_ranges
  firewall_rules = [
    {
      direction  = "in"
      protocol   = "tcp"
      port       = "22"
      source_ips = ["0.0.0.0/0"]
    },
  ]
  #attach_dns = true
  #dns_record = {
    #dns_name        = "bastion"
    #dns_domain      = "superhero.io"
    #dns_record_type = "A"
    #dns_ttl         = "300"
    #dns_zone_id     = module.superhero-io-dns-zone.dns_zone_id
  #}
}