# Set account-wide variables. These are automatically pulled in to configure the remote state bucket in the root
# terragrunt.hcl configuration.
locals {
  account_name   = "afs-mdr-test-c2-gov"
  account_alias  = "afs-mdr-test-c2-gov"
  aws_account_id = "738800754746"
  instance_termination_protection = false # set to true for production!
  
  account_tags = { } 
  c2_account_standards_path = "../../mdr-test-c2/005-account-standards-c2"

  # For CIDR assignment, see https://github.mdr.defpoint.com/mdr-engineering/msoc-infrastructure/wiki/IP-Address-Allocation
  vpc_info = {
    "vpc-splunk" = {
      "name" = "vpc-splunk"
      "purpose" = "Splunk Systems (MOOSE)"
      "cidr" = "10.20.16.0/22",
      "tgw_attached" = true,
    },
    "vpc-system-services" = {
      "name" = "vpc-system-services",
      "purpose" = "Internal Services for Systems (not people)",
      "cidr" = "10.20.0.0/22",
      "tgw_attached" = false, # NOTE: This is attached via the transit gateway creation
    },
    "vpc-qualys" = {
      "name" = "vpc-qualys",
      "purpose" = "Security Scanning",
      "cidr" = "10.20.12.0/22",
      "tgw_attached" = true,
    },
    "vpc-interconnects" = {
      "name" = "vpc-interconnects",
      "purpose" = "Interconnections between AWS partitions",
      "cidr" = "10.179.128.0/22",
      "tgw_attached" = false,
    },
    "vpc-access" = {
      "name" = "vpc-access"
      "purpose" = "Systems providing restricted access, such as bastions and vpn concentrators"
      "cidr" = "10.20.20.0/22"
      "tgw_attached" = true,
    },
    "vpc-portal" = {
      "name" = "vpc-portal"
      "purpose" = "The Customer Portal"
      "cidr" = "10.20.32.0/24"
      "tgw_attached" = true,
    },
    "vpc-public" = {
      "name" = "vpc-public"
      "purpose" = "Publicly Accessible Infrastructure Services, such as GHE and Jira"
      "cidr" = "10.20.24.0/22"
      "tgw_attached" = true,
    },
    "vpc-private-services" = {
      "name" = "vpc-private-services"
      "purpose" = "Private XDR Services for XDR users"
      "cidr" = "10.20.28.0/22"
      "tgw_attached" = true,
    },
  }

  # DNS Resolver
  resolver_instance_type = "t3a.micro"
  resolver_instance_key_name = "fdamstra"

  # For testing
  create_test_instance = false
  test_instance_key_name = "fdamstra" # They with which to provision the test instance
  # Extra customization if you want it
  test_instance_ami = "base" # default = minion
  test_instance_type = "t3a.micro" # default = t3a.micro

  # AS Number used for various resources, but not every account needs one.
  asn = 64710 # changing this replaces the gateway

  # Interconnects
  interconnect_asn = 64777
  interconnects_instance_type = "t3a.micro"
  interconnects_key_name = "fdamstra" # DO NOT CHANGE
  interconnects_count = 2
  interconnect_instances_path = "../018-interconnect-instances"

  # Qualys Scanners
  qualys_personalization_codes = {
    standard = "21009597903247"
    preauthorized = "21005906078774"
  }

  # Qualys Connector
  qualys_connector_externalid = "1601148045651" # Needs to come from the qualys console
}