1.Virtual.Network/config.auto.tfvars

resourceGroupName = "ArtistAnywhere.Network"

#################################################################################################
# Virtual Network (https://learn.microsoft.com/azure/virtual-network/virtual-networks-overview) #
#################################################################################################

virtualNetworks = [
  {
    enable   = true
    name     = "Studio"
    hubName  = "USCentral"
    location = "SouthCentralUS"
    addressSpace = [
      "10.0.0.0/16"
    ]
    dnsAddresses = [
    ]
    subnets = [
      {
        name = "Cluster"
        addressSpace = [
          "10.0.0.0/17"
        ]
        serviceEndpoints = [
          "Microsoft.Storage"
        ]
        serviceDelegation = null
      },
      {
        name = "Workstation"
        addressSpace = [
          "10.0.128.0/18"
        ]
        serviceEndpoints = [
        ]
        serviceDelegation = null
      },
      {
        name = "Identity"
        addressSpace = [
          "10.0.192.0/24"
        ]
        serviceEndpoints = [
        ]
        serviceDelegation = null
      },
      {
        name = "Storage"
        addressSpace = [
          "10.0.193.0/24"
        ]
        serviceEndpoints = [
          "Microsoft.Storage"
        ]
        serviceDelegation = null
      },
      {
        name = "StorageNetApp"
        addressSpace = [
          "10.0.194.0/24"
        ]
        serviceEndpoints = [
        ]
        serviceDelegation = {
          service = "Microsoft.Netapp/volumes"
          actions = [
            "Microsoft.Network/networkinterfaces/*",
            "Microsoft.Network/virtualNetworks/subnets/join/action"
          ]
        }
      },
      {
        name = "Data"
        addressSpace = [
          "10.0.195.0/24"
        ]
        serviceEndpoints = [
        ]
        serviceDelegation = null
      },
      {
        name = "DataMySQL"
        addressSpace = [
          "10.0.196.0/24"
        ]
        serviceEndpoints = [
        ]
        serviceDelegation = {
          service = "Microsoft.DBforMySQL/flexibleServers"
          actions = [
            "Microsoft.Network/virtualNetworks/subnets/join/action"
          ]
        }
      },
      {
        name = "DataPostgreSQL"
        addressSpace = [
          "10.0.197.0/24"
        ]
        serviceEndpoints = [
        ]
        serviceDelegation = {
          service = "Microsoft.DBforPostgreSQL/flexibleServers"
          actions = [
            "Microsoft.Network/virtualNetworks/subnets/join/action"
          ]
        }
      },
      {
        name = "DataCassandra"
        addressSpace = [
          "10.0.198.0/24"
        ]
        serviceEndpoints = [
        ]
        serviceDelegation = {
          service = "Microsoft.DocumentDB/cassandraClusters"
          actions = [
            "Microsoft.Network/virtualNetworks/subnets/join/action"
          ]
        }
      },
      {
        name = "Cache"
        addressSpace = [
          "10.0.199.0/24"
        ]
        serviceEndpoints = [
        ]
        serviceDelegation = null
      },
      {
        name = "App"
        addressSpace = [
          "10.0.200.0/23"
        ]
        serviceEndpoints = [
        ]
        serviceDelegation = null
      },
      {
        name = "AppCPU"
        addressSpace = [
          "10.0.202.0/24"
        ]
        serviceEndpoints = [
        ]
        serviceDelegation = {
          service = "Microsoft.App/environments"
          actions = [
            "Microsoft.Network/virtualNetworks/subnets/join/action"
          ]
        }
      },
      {
        name = "AppGPU"
        addressSpace = [
          "10.0.203.0/24"
        ]
        serviceEndpoints = [
        ]
        serviceDelegation = {
          service = "Microsoft.App/environments"
          actions = [
            "Microsoft.Network/virtualNetworks/subnets/join/action"
          ]
        }
      },
      {
        name = "Web"
        addressSpace = [
          "10.0.204.0/24"
        ]
        serviceEndpoints = [
          "Microsoft.Storage"
        ]
        serviceDelegation = null
      },
      {
        name = "GatewaySubnet"
        addressSpace = [
          "10.0.254.0/25"
        ]
        serviceEndpoints = [
        ]
        serviceDelegation = null
      },
      {
        name = "AzureBastionSubnet"
        addressSpace = [
          "10.0.254.128/25"
        ]
        serviceEndpoints = [
        ]
        serviceDelegation = null
      },
      {
        name = "AzureFirewallSubnet"
        addressSpace = [
          "10.0.255.0/25"
        ]
        serviceEndpoints = [
        ]
        serviceDelegation = null
      },
      {
        name = "AzureFirewallManagementSubnet"
        addressSpace = [
          "10.0.255.128/25"
        ]
        serviceEndpoints = [
        ]
        serviceDelegation = null
      }
    ]
  }
]

virtualNetworksExtended = [
  {
    enable   = true
    hubName  = "USWest"
    location = "WestUS"
    addressSpace = {
      search  = "10.0"
      replace = "10.1"
    }
    extendedZone = {
      enable   = false
      name     = ""
      location = ""
    }
  },
  {
    enable   = true
    hubName  = "USWest"
    location = "WestUS"
    addressSpace = {
      search  = "10.0"
      replace = "10.2"
    }
    extendedZone = {
      enable   = true
      name     = "LosAngeles"
      location = "WestUS"
    }
  },
  {
    enable   = true
    hubName  = "USWest"
    location = "WestUS2"
    addressSpace = {
      search  = "10.0"
      replace = "10.3"
    }
    extendedZone = {
      enable   = false
      name     = ""
      location = ""
    }
  },
  {
    enable   = true
    hubName  = "USWest"
    location = "WestUS3"
    addressSpace = {
      search  = "10.0"
      replace = "10.4"
    }
    extendedZone = {
      enable   = false
      name     = ""
      location = ""
    }
  },
  {
    enable   = true
    hubName  = "USEast"
    location = "EastUS"
    addressSpace = {
      search  = "10.0"
      replace = "10.5"
    }
    extendedZone = {
      enable   = false
      name     = ""
      location = ""
    }
  },
  {
    enable   = true
    hubName  = "USEast"
    location = "EastUS2"
    addressSpace = {
      search  = "10.0"
      replace = "10.6"
    }
    extendedZone = {
      enable   = false
      name     = ""
      location = ""
    }
  },
  {
    enable   = false
    hubName  = "USEast"
    location = "EastUS3"
    addressSpace = {
      search  = "10.0"
      replace = "10.7"
    }
    extendedZone = {
      enable   = false
      name     = ""
      location = ""
    }
  }
]

#################################################################################
# Virtual WAN (https://learn.microsoft.com/azure/virtual-wan/virtual-wan-about) #
#################################################################################

virtualWAN = {
  enable = true
  name   = "xstudio"
  type   = "Standard"
  hubs = [
    {
      enable       = true
      name         = "USWest"
      type         = "Standard"
      location     = "WestUS"
      addressSpace = "10.10.0.0/24"
      router = {
        preferenceMode = "ExpressRoute"
        scaleUnit = {
          minCount = 2
        }
        routes = [
          {
            enable      = false
            nextAddress = ""
            addressSpace = [
            ]
          }
        ]
      }
      vpnGateway = {
        enable     = false
        name       = "xstudio"
        scaleUnits = 1
        siteToSite = false
        client = {
          addressSpace = [
          ]
        }
      }
    },
    {
      enable       = true
      name         = "USCentral"
      type         = "Standard"
      location     = "SouthCentralUS"
      addressSpace = "10.11.0.0/24"
      router = {
        preferenceMode = "ExpressRoute"
        scaleUnit = {
          minCount = 2
        }
        routes = [
          {
            enable      = false
            nextAddress = ""
            addressSpace = [
            ]
          }
        ]
      }
      vpnGateway = {
        enable     = true
        name       = "xstudio"
        scaleUnits = 1
        siteToSite = false
        client = {
          addressSpace = [
            "10.20.0.0/24"
          ]
        }
      }
    },
    {
      enable       = true
      name         = "USEast"
      type         = "Standard"
      location     = "EastUS"
      addressSpace = "10.12.0.0/24"
      router = {
        preferenceMode = "ExpressRoute"
        scaleUnit = {
          minCount = 2
        }
        routes = [
          {
            enable      = false
            nextAddress = ""
            addressSpace = [
            ]
          }
        ]
      }
      vpnGateway = {
        enable     = false
        name       = "xstudio"
        scaleUnits = 1
        siteToSite = false
        client = {
          addressSpace = [
          ]
        }
      }
    }
  ]
}

############################################################################
# Private DNS (https://learn.microsoft.com/azure/dns/private-dns-overview) #
############################################################################

privateDNS = {
  zoneName = "azure.studio"
  autoRegistration = {
    enable = true
  }
}

##################################################################
# Firewall (https://learn.microsoft.com/azure/firewall/overview) #
##################################################################

firewall = {
  enable = false
  name   = "xstudio"
  type   = "AZFW_VNet"
  tier   = "Standard"
}

########################################################################
# Bastion (https://learn.microsoft.com/azure/bastion/bastion-overview) #
########################################################################

bastion = {
  enable              = true
  type                = "Standard"
  scaleUnits          = 2
  enableFileCopy      = true
  enableCopyPaste     = true
  enableIpConnect     = true
  enableTunneling     = true
  enablePerRegion     = false
  enableShareableLink = false
  enableSessionRecord = false
}

##########################################################################################################################
# Network Address Translation (NAT) Gateway (https://learn.microsoft.com/azure/virtual-network/nat-gateway/nat-overview) #
##########################################################################################################################

natGateway = {
  enable = true
  name   = "Gateway-NAT"
  ipAddress = {
    tier = "Standard"
    type = "Regional"
  }
}

################################################################################################################
# Virtual Network Peering (https://learn.microsoft.com/azure/virtual-network/virtual-network-peering-overview) #
################################################################################################################

networkPeering = {
  enable                      = false
  allowRemoteNetworkAccess    = true
  allowRemoteForwardedTraffic = true
  allowGatewayTransit         = true
  useRemoteGateway = {
    computeNetwork = false
    storageNetwork = false
  }
}

######################################################################################################################
# Application Gateway                (https://learn.microsoft.com/azure/application-gateway/overview-v2)             #
# Application Gateway for Containers (https://learn.microsoft.com/azure/application-gateway/for-containers/overview) #
######################################################################################################################

appGateway = {
  enable   = false
  name     = "Gateway-App"
  type     = "Standard_v2"
  tier     = "Standard_v2"
  capacity = 1
}