{"id":19508913,"url":"https://github.com/rhythmictech/terraform-aws-fortigate-vpn","last_synced_at":"2026-05-16T10:31:05.612Z","repository":{"id":51668951,"uuid":"252255837","full_name":"rhythmictech/terraform-aws-fortigate-vpn","owner":"rhythmictech","description":"Creates a site-to-site VPN connection intended to terminate to a FortiGate firewall. Creates a template configuration file that can be used to easily configure the connection.","archived":false,"fork":false,"pushed_at":"2025-07-24T19:23:23.000Z","size":19,"stargazers_count":2,"open_issues_count":1,"forks_count":1,"subscribers_count":0,"default_branch":"master","last_synced_at":"2026-02-12T09:47:31.022Z","etag":null,"topics":["aws","fortigate","terraform","terraform-module","vpn"],"latest_commit_sha":null,"homepage":"https://registry.terraform.io/modules/rhythmictech/fortigate-vpn/aws","language":"HCL","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/rhythmictech.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null}},"created_at":"2020-04-01T18:29:47.000Z","updated_at":"2025-01-10T21:41:48.000Z","dependencies_parsed_at":"2023-02-01T10:00:54.972Z","dependency_job_id":null,"html_url":"https://github.com/rhythmictech/terraform-aws-fortigate-vpn","commit_stats":null,"previous_names":[],"tags_count":4,"template":false,"template_full_name":null,"purl":"pkg:github/rhythmictech/terraform-aws-fortigate-vpn","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rhythmictech%2Fterraform-aws-fortigate-vpn","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rhythmictech%2Fterraform-aws-fortigate-vpn/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rhythmictech%2Fterraform-aws-fortigate-vpn/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rhythmictech%2Fterraform-aws-fortigate-vpn/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/rhythmictech","download_url":"https://codeload.github.com/rhythmictech/terraform-aws-fortigate-vpn/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rhythmictech%2Fterraform-aws-fortigate-vpn/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33098779,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-16T04:41:52.686Z","status":"ssl_error","status_checked_at":"2026-05-16T04:41:52.009Z","response_time":115,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["aws","fortigate","terraform","terraform-module","vpn"],"created_at":"2024-11-10T23:10:20.837Z","updated_at":"2026-05-16T10:31:05.596Z","avatar_url":"https://github.com/rhythmictech.png","language":"HCL","funding_links":[],"categories":[],"sub_categories":[],"readme":"# terraform-aws-fortigate-vpn\n[![tflint](https://github.com/rhythmictech/terraform-aws-fortigate-vpn/workflows/tflint/badge.svg?branch=master\u0026event=push)](https://github.com/rhythmictech/terraform-aws-fortigate-vpn/actions?query=workflow%3Atflint+event%3Apush+branch%3Amaster)\n[![tfsec](https://github.com/rhythmictech/terraform-aws-fortigate-vpn/workflows/tfsec/badge.svg?branch=master\u0026event=push)](https://github.com/rhythmictech/terraform-aws-fortigate-vpn/actions?query=workflow%3Atfsec+event%3Apush+branch%3Amaster)\n[![yamllint](https://github.com/rhythmictech/terraform-aws-fortigate-vpn/workflows/yamllint/badge.svg?branch=master\u0026event=push)](https://github.com/rhythmictech/terraform-aws-fortigate-vpn/actions?query=workflow%3Ayamllint+event%3Apush+branch%3Amaster)\n[![misspell](https://github.com/rhythmictech/terraform-aws-fortigate-vpn/workflows/misspell/badge.svg?branch=master\u0026event=push)](https://github.com/rhythmictech/terraform-aws-fortigate-vpn/actions?query=workflow%3Amisspell+event%3Apush+branch%3Amaster)\n[![pre-commit-check](https://github.com/rhythmictech/terraform-aws-fortigate-vpn/workflows/pre-commit-check/badge.svg?branch=master\u0026event=push)](https://github.com/rhythmictech/terraform-aws-fortigate-vpn/actions?query=workflow%3Apre-commit-check+event%3Apush+branch%3Amaster)\n\u003ca href=\"https://twitter.com/intent/follow?screen_name=RhythmicTech\"\u003e\u003cimg src=\"https://img.shields.io/twitter/follow/RhythmicTech?style=social\u0026logo=twitter\" alt=\"follow on Twitter\"\u003e\u003c/a\u003e\n\nCreates a site-to-site VPN connection intended to terminate to a FortiGate firewall. Creates a template configuration file that can be used to easily configure the connection.\n\n\u003c!-- BEGINNING OF PRE-COMMIT-TERRAFORM DOCS HOOK --\u003e\n## Requirements\n\n| Name | Version |\n|------|---------|\n| \u003ca name=\"requirement_terraform\"\u003e\u003c/a\u003e [terraform](#requirement\\_terraform) | \u003e= 0.12 |\n| \u003ca name=\"requirement_aws\"\u003e\u003c/a\u003e [aws](#requirement\\_aws) | \u003e= 2 |\n| \u003ca name=\"requirement_local\"\u003e\u003c/a\u003e [local](#requirement\\_local) | \u003e= 1 |\n\n## Providers\n\n| Name | Version |\n|------|---------|\n| \u003ca name=\"provider_aws\"\u003e\u003c/a\u003e [aws](#provider\\_aws) | \u003e= 2 |\n| \u003ca name=\"provider_local\"\u003e\u003c/a\u003e [local](#provider\\_local) | \u003e= 1 |\n\n## Modules\n\n| Name | Source | Version |\n|------|--------|---------|\n| \u003ca name=\"module_psk1\"\u003e\u003c/a\u003e [psk1](#module\\_psk1) | git::https://github.com/rhythmictech/terraform-aws-secretsmanager-random-secret | v1.1.1 |\n| \u003ca name=\"module_psk2\"\u003e\u003c/a\u003e [psk2](#module\\_psk2) | git::https://github.com/rhythmictech/terraform-aws-secretsmanager-random-secret | v1.1.1 |\n\n## Resources\n\n| Name | Type |\n|------|------|\n| [aws_customer_gateway.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/customer_gateway) | resource |\n| [aws_vpn_connection.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpn_connection) | resource |\n| [local_file.this](https://registry.terraform.io/providers/hashicorp/local/latest/docs/resources/file) | resource |\n| [aws_ec2_transit_gateway.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/ec2_transit_gateway) | data source |\n| [aws_vpn_gateway.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/vpn_gateway) | data source |\n\n## Inputs\n\n| Name | Description | Type | Default | Required |\n|------|-------------|------|---------|:--------:|\n| \u003ca name=\"input_account_name\"\u003e\u003c/a\u003e [account\\_name](#input\\_account\\_name) | Name for AWS account side of tunnel | `string` | n/a | yes |\n| \u003ca name=\"input_customer_bgp_asn\"\u003e\u003c/a\u003e [customer\\_bgp\\_asn](#input\\_customer\\_bgp\\_asn) | BGP for customer side of tunnel | `number` | n/a | yes |\n| \u003ca name=\"input_customer_gateway_type\"\u003e\u003c/a\u003e [customer\\_gateway\\_type](#input\\_customer\\_gateway\\_type) | Type for customer gateway | `string` | `\"ipsec.1\"` | no |\n| \u003ca name=\"input_customer_ip_address\"\u003e\u003c/a\u003e [customer\\_ip\\_address](#input\\_customer\\_ip\\_address) | IP address for customer side | `string` | n/a | yes |\n| \u003ca name=\"input_customer_name\"\u003e\u003c/a\u003e [customer\\_name](#input\\_customer\\_name) | Name for customer side of tunnel | `string` | n/a | yes |\n| \u003ca name=\"input_generate_fortigate_config\"\u003e\u003c/a\u003e [generate\\_fortigate\\_config](#input\\_generate\\_fortigate\\_config) | Generate a FortiGate config template (does not include PSKs) | `bool` | `true` | no |\n| \u003ca name=\"input_tags\"\u003e\u003c/a\u003e [tags](#input\\_tags) | Tags to add to supported resources | `map(string)` | `{}` | no |\n| \u003ca name=\"input_transit_gateway_id\"\u003e\u003c/a\u003e [transit\\_gateway\\_id](#input\\_transit\\_gateway\\_id) | Transit gateway to attach VPN to (required if `vpn_gateway_id` not set) | `string` | `null` | no |\n| \u003ca name=\"input_tunnel1_inside_cidr\"\u003e\u003c/a\u003e [tunnel1\\_inside\\_cidr](#input\\_tunnel1\\_inside\\_cidr) | Specify a Tunnel 1 inside CIDR (optional) | `string` | `\"\"` | no |\n| \u003ca name=\"input_tunnel1_psk\"\u003e\u003c/a\u003e [tunnel1\\_psk](#input\\_tunnel1\\_psk) | Specify a Tunnel 1 PSK explicitly (optional) | `string` | `\"\"` | no |\n| \u003ca name=\"input_tunnel1_psk_version\"\u003e\u003c/a\u003e [tunnel1\\_psk\\_version](#input\\_tunnel1\\_psk\\_version) | Version to use for PSK (increment to generate a new PSK) | `number` | `1` | no |\n| \u003ca name=\"input_tunnel2_inside_cidr\"\u003e\u003c/a\u003e [tunnel2\\_inside\\_cidr](#input\\_tunnel2\\_inside\\_cidr) | Specify a Tunnel 2 inside CIDR (optional) | `string` | `\"\"` | no |\n| \u003ca name=\"input_tunnel2_psk\"\u003e\u003c/a\u003e [tunnel2\\_psk](#input\\_tunnel2\\_psk) | Specify a Tunnel 2 PSK explicitly (optional) | `string` | `\"\"` | no |\n| \u003ca name=\"input_tunnel2_psk_version\"\u003e\u003c/a\u003e [tunnel2\\_psk\\_version](#input\\_tunnel2\\_psk\\_version) | Version to use for PSK (increment to generate a new PSK) | `number` | `1` | no |\n| \u003ca name=\"input_use_secrets_manager\"\u003e\u003c/a\u003e [use\\_secrets\\_manager](#input\\_use\\_secrets\\_manager) | Use Secrets Manager to store/manage PSKs | `bool` | `true` | no |\n| \u003ca name=\"input_use_tgw\"\u003e\u003c/a\u003e [use\\_tgw](#input\\_use\\_tgw) | Set to true if attaching the VPN to a Transit Gateway | `bool` | `false` | no |\n| \u003ca name=\"input_vgw_id\"\u003e\u003c/a\u003e [vgw\\_id](#input\\_vgw\\_id) | Virtual Private Gateway to attach VPN to (required if `transit_gateway_id` not set) | `string` | `null` | no |\n| \u003ca name=\"input_wan_interface\"\u003e\u003c/a\u003e [wan\\_interface](#input\\_wan\\_interface) | WAN interface to use in fortigate config template | `string` | `\"wan1\"` | no |\n\n## Outputs\n\n| Name | Description |\n|------|-------------|\n| \u003ca name=\"output_customer_gateway_bgp_asn\"\u003e\u003c/a\u003e [customer\\_gateway\\_bgp\\_asn](#output\\_customer\\_gateway\\_bgp\\_asn) | Customer Gateway BGP ASN |\n| \u003ca name=\"output_customer_gateway_id\"\u003e\u003c/a\u003e [customer\\_gateway\\_id](#output\\_customer\\_gateway\\_id) | Customer Gateway ID |\n| \u003ca name=\"output_customer_gateway_ip_address\"\u003e\u003c/a\u003e [customer\\_gateway\\_ip\\_address](#output\\_customer\\_gateway\\_ip\\_address) | Customer Gateway IP Address |\n| \u003ca name=\"output_vpn_connection_tunnel1_address\"\u003e\u003c/a\u003e [vpn\\_connection\\_tunnel1\\_address](#output\\_vpn\\_connection\\_tunnel1\\_address) | Tunnel 1 Public IP Address |\n| \u003ca name=\"output_vpn_connection_tunnel1_bgp_asn\"\u003e\u003c/a\u003e [vpn\\_connection\\_tunnel1\\_bgp\\_asn](#output\\_vpn\\_connection\\_tunnel1\\_bgp\\_asn) | Tunnel 1 BGP ASN |\n| \u003ca name=\"output_vpn_connection_tunnel1_cgw_inside_address\"\u003e\u003c/a\u003e [vpn\\_connection\\_tunnel1\\_cgw\\_inside\\_address](#output\\_vpn\\_connection\\_tunnel1\\_cgw\\_inside\\_address) | Tunnel 1 Customer Inside IP Address |\n| \u003ca name=\"output_vpn_connection_tunnel1_preshared_key\"\u003e\u003c/a\u003e [vpn\\_connection\\_tunnel1\\_preshared\\_key](#output\\_vpn\\_connection\\_tunnel1\\_preshared\\_key) | Tunnel 1 Preshared Key |\n| \u003ca name=\"output_vpn_connection_tunnel1_vgw_inside_address\"\u003e\u003c/a\u003e [vpn\\_connection\\_tunnel1\\_vgw\\_inside\\_address](#output\\_vpn\\_connection\\_tunnel1\\_vgw\\_inside\\_address) | Tunnel 1 AWS Inside IP Address |\n| \u003ca name=\"output_vpn_connection_tunnel2_address\"\u003e\u003c/a\u003e [vpn\\_connection\\_tunnel2\\_address](#output\\_vpn\\_connection\\_tunnel2\\_address) | Tunnel 2 Public IP Address |\n| \u003ca name=\"output_vpn_connection_tunnel2_bgp_asn\"\u003e\u003c/a\u003e [vpn\\_connection\\_tunnel2\\_bgp\\_asn](#output\\_vpn\\_connection\\_tunnel2\\_bgp\\_asn) | Tunnel 2 BGP ASN |\n| \u003ca name=\"output_vpn_connection_tunnel2_cgw_inside_address\"\u003e\u003c/a\u003e [vpn\\_connection\\_tunnel2\\_cgw\\_inside\\_address](#output\\_vpn\\_connection\\_tunnel2\\_cgw\\_inside\\_address) | Tunnel 2 Customer Inside IP Address |\n| \u003ca name=\"output_vpn_connection_tunnel2_preshared_key\"\u003e\u003c/a\u003e [vpn\\_connection\\_tunnel2\\_preshared\\_key](#output\\_vpn\\_connection\\_tunnel2\\_preshared\\_key) | Tunnel 2 Preshared Key |\n| \u003ca name=\"output_vpn_connection_tunnel2_vgw_inside_address\"\u003e\u003c/a\u003e [vpn\\_connection\\_tunnel2\\_vgw\\_inside\\_address](#output\\_vpn\\_connection\\_tunnel2\\_vgw\\_inside\\_address) | Tunnel 2 AWS Inside IP Address |\n| \u003ca name=\"output_vpn_connection_vpn_gw_id\"\u003e\u003c/a\u003e [vpn\\_connection\\_vpn\\_gw\\_id](#output\\_vpn\\_connection\\_vpn\\_gw\\_id) | VPN Gateway ID |\n\u003c!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK --\u003e\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frhythmictech%2Fterraform-aws-fortigate-vpn","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Frhythmictech%2Fterraform-aws-fortigate-vpn","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frhythmictech%2Fterraform-aws-fortigate-vpn/lists"}