From d47916eff221053400ac4c110d5af32ad2218ca8 Mon Sep 17 00:00:00 2001 From: Melchior Reimers Date: Wed, 4 Feb 2026 20:08:47 +0100 Subject: [PATCH] source instead of destination ips --- main.tf | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/main.tf b/main.tf index 31e197e..c53e0f3 100644 --- a/main.tf +++ b/main.tf @@ -57,11 +57,12 @@ resource "hcloud_firewall" "vps" { description = "All TCP outbound" } + rule { direction = "out" protocol = "udp" port = "1-65535" - source_ips = ["0.0.0.0/0", "::/0"] + destination_ips = ["0.0.0.0/0", "::/0"] description = "All UDP outbound" } @@ -71,12 +72,12 @@ resource "hcloud_firewall" "vps" { destination_ips = ["0.0.0.0/0", "::/0"] description = "ICMP outbound" } - rule { - direction = "in" - protocol = "tcp" - port = "22" - destination_ips = ["0.0.0.0/0", "::/0"] - description = "ssh outbound" + rule { + direction = "in" + protocol = "tcp" + port = "22" + source_ips = length(var.allowed_ssh_ips) > 0 ? var.allowed_ssh_ips : ["0.0.0.0/0", "::/0"] + description = "SSH inbound" } }