resource "alicloud_vpc" "fischerx" {
  vpc_name   = var.vpc_name
  cidr_block = var.vpc_cidr
}

resource "alicloud_vswitch" "fischerx" {
  count      = length(var.vswitch_cidrs)
  vpc_id     = alicloud_vpc.fischerx.id
  cidr_block = element(var.vswitch_cidrs, count.index)
  zone_id    = element(var.zone_ids, count.index)
  vswitch_name = "${var.vpc_name}-vswitch-${count.index}"
}

resource "alicloud_security_group" "fischerx" {
  name   = "${var.vpc_name}-security-group"
  vpc_id = alicloud_vpc.fischerx.id
}

resource "alicloud_security_group_rule" "allow_internal" {
  type              = "ingress"
  ip_protocol       = "tcp"
  nic_type          = "intranet"
  policy            = "accept"
  port_range        = "1/65535"
  priority          = 1
  security_group_id = alicloud_security_group.fischerx.id
  cidr_ip           = alicloud_vpc.fischerx.cidr_block
}

resource "alicloud_security_group_rule" "allow_ssh" {
  type              = "ingress"
  ip_protocol       = "tcp"
  nic_type          = "intranet"
  policy            = "accept"
  port_range        = "22/22"
  priority          = 2
  security_group_id = alicloud_security_group.fischerx.id
  cidr_ip           = "0.0.0.0/0"
}