resource "unifi_ap_group" "default" {
  name = "Default AP Group"
  for_wlanconf = true
}

resource "unifi_wlan" "main" {
  name            = data.vault_kv_secret.networking.data["main_ap_ssid"]
  passphrase      = data.vault_kv_secret.networking.data["main_ap_pass"]
  security        = "wpapsk"
  ap_group_ids    = [unifi_ap_group.default.id]
  network_conf_id = unifi_network.trusted.id
}

resource "unifi_wlan" "iot" {
  name            = data.vault_kv_secret.networking.data["iot_ap_ssid"]
  passphrase      = data.vault_kv_secret.networking.data["iot_ap_pass"]
  security        = "wpapsk"
  ap_group_ids    = [unifi_ap_group.default.id]
  network_conf_id = unifi_network.iot.id
}