mr0xb/home-iac
Watch
1
0
Fork
You've already forked home-iac
 0
mirror of https://github.com/mr0xb/home-iac.git synced 2026-08-28 03:44:57 -04:00
Code Issues Projects Releases Packages Wiki Activity

initial commit

Browse source
This commit is contained in:
mr0xb 2026-05-24 02:51:15 -04:00
commit 5e3d71294d
10 changed files with 274 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

45
terraform/unifi/firewall.tf Normal file
View file

@ -0,0 +1,45 @@
resource "unifi_firewall_rule" "block_iot_to_trusted" {
name = "Isolate IOT"
ruleset = "LAN_IN"
action = "drop"
protocol = "all"
src_network_id = unifi_network.iot.id
src_network_type = "NETv4"
dst_network_id = unifi_network.trusted.id
dst_network_type = "NETv4"
state_new = true
state_established = false
state_invalid = true
state_related = false
}
resource "unifi_firewall_rule" "allow_trusted_to_iot" {
name = "Allow Trusted to IOT"
ruleset = "LAN_IN"
action = "accept"
protocl = "all"
src_network_id = unifi_network.trusted.id
src_network_type = "NETv4"
dst_network_id = unifi_network.iot.id
dst_network_type = "NETv4"
}
resource "unifi_firewall_rule" "block_iot_to_trusted" {
name = "Isolate IOT"
ruleset = "LAN_IN"
action = "drop"
protocol = "all"
src_network_id = unifi_network.iot.id
src_network_type = "NETv4"
dst_network_id = unifi_network.trusted.id
dst_network_type = "NETv4"
state_new = true
state_established = false
state_invalid = true
state_related = false
}