https://github.com/tf-scaleway-modules/terraform-scaleway-network

A Terraform module for creating and managing Scaleway Network infrastructure
https://github.com/tf-scaleway-modules/terraform-scaleway-network

module network scaleway terraform vpc

Last synced: about 1 month ago
JSON representation

A Terraform module for creating and managing Scaleway Network infrastructure

Host: GitHub
URL: https://github.com/tf-scaleway-modules/terraform-scaleway-network
Owner: tf-scaleway-modules
License: apache-2.0
Created: 2025-12-14T11:24:36.000Z (6 months ago)
Default Branch: main
Last Pushed: 2025-12-14T11:47:40.000Z (6 months ago)
Last Synced: 2025-12-20T22:47:31.431Z (6 months ago)
Topics: module, network, scaleway, terraform, vpc
Language: HCL
Homepage:
Size: 25.4 KB
Stars: 0
Watchers: 0
Forks: 0
Open Issues: 0
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- License: LICENSE

Awesome Lists containing this project

README

          # Scaleway Network Terraform Module

[![Apache 2.0][apache-shield]][apache]

[![Terraform][terraform-badge]][terraform-url]

[![Scaleway Provider][scaleway-badge]][scaleway-url]

[![Latest Release][release-badge]][release-url]

A Terraform module for creating and managing **Scaleway** Network infrastructure. This module provisions VPCs, private networks, public gateways with NAT, Access Control Lists for traffic filtering, and optional SSH bastion hosts. It supports multi-zone deployments for high availability and provides flexible network configuration with IPv4/IPv6 support.

## Usage Examples

A comprehensive examples available in the [`examples/`](examples/) directory:

- **[Minimal](examples/minimal/)** - Simplest configuration for quick start

- **[Complete](examples/complete/)** - Full-featured production setup

## Requirements

| Name | Version |

|------|---------|

|  [terraform](#requirement\_terraform) | >= 1.10.7 |

|  [scaleway](#requirement\_scaleway) | ~> 2.64 |

## Providers

| Name | Version |

|------|---------|

|  [scaleway](#provider\_scaleway) | ~> 2.64 |

## Modules

No modules.

## Resources

| Name | Type |

|------|------|

| [scaleway_ipam_ip.this](https://registry.terraform.io/providers/scaleway/scaleway/latest/docs/resources/ipam_ip) | resource |

| [scaleway_vpc.this](https://registry.terraform.io/providers/scaleway/scaleway/latest/docs/resources/vpc) | resource |

| [scaleway_vpc_acl.this](https://registry.terraform.io/providers/scaleway/scaleway/latest/docs/resources/vpc_acl) | resource |

| [scaleway_vpc_gateway_network.this](https://registry.terraform.io/providers/scaleway/scaleway/latest/docs/resources/vpc_gateway_network) | resource |

| [scaleway_vpc_private_network.this](https://registry.terraform.io/providers/scaleway/scaleway/latest/docs/resources/vpc_private_network) | resource |

| [scaleway_vpc_public_gateway.this](https://registry.terraform.io/providers/scaleway/scaleway/latest/docs/resources/vpc_public_gateway) | resource |

| [scaleway_vpc_public_gateway_ip.this](https://registry.terraform.io/providers/scaleway/scaleway/latest/docs/resources/vpc_public_gateway_ip) | resource |

| [scaleway_account_project.project](https://registry.terraform.io/providers/scaleway/scaleway/latest/docs/data-sources/account_project) | data source |

## Inputs

| Name | Description | Type | Default | Required |

|------|-------------|------|---------|:--------:|

|  [access\_control\_list\_default\_policy](#input\_access\_control\_list\_default\_policy) | Default action when no ACL rules match: accept or drop | `string` | `"accept"` | no |

|  [access\_control\_list\_is\_ipv6](#input\_access\_control\_list\_is\_ipv6) | Apply ACL rules to IPv6 traffic instead of IPv4 | `bool` | `false` | no |

|  [access\_control\_list\_rules](#input\_access\_control\_list\_rules) | ACL rules for traffic filtering (protocol, ports, source/destination, action) | 
list(object({
    protocol      = string # Protocol: ANY, TCP, UDP, or ICMP
    src_port_low  = number
    src_port_high = number
    dst_port_low  = number
    dst_port_high = number
    source        = string
    destination   = string
    description   = string
    action        = string
  }))
 | [
  {
    "action": "accept",
    "description": "Allow HTTP traffic from any source",
    "destination": "0.0.0.0/0",
    "dst_port_high": 80,
    "dst_port_low": 80,
    "protocol": "TCP",
    "source": "0.0.0.0/0",
    "src_port_high": 0,
    "src_port_low": 0
  }
] | no |

|  [bastion\_allowed\_ip\_ranges](#input\_bastion\_allowed\_ip\_ranges) | CIDR ranges allowed to access SSH bastion | `list(string)` | [
  "0.0.0.0/0"
] | no |

|  [bastion\_ssh\_port](#input\_bastion\_ssh\_port) | SSH port for bastion access (1-65535) | `number` | `61000` | no |

|  [enable\_access\_control\_list](#input\_enable\_access\_control\_list) | Create VPC Access Control List for traffic filtering | `bool` | `false` | no |

|  [enable\_bastion](#input\_enable\_bastion) | Enable SSH bastion on public gateways for secure access | `bool` | `false` | no |

|  [enable\_gateway](#input\_enable\_gateway) | Create public gateways for internet connectivity | `bool` | `true` | no |

|  [gateway\_enable\_masquerade](#input\_gateway\_enable\_masquerade) | Enable NAT masquerade for outbound internet access | `bool` | `true` | no |

|  [gateway\_enable\_smtp](#input\_gateway\_enable\_smtp) | Enable SMTP (port 25) for email delivery | `bool` | `false` | no |

|  [gateway\_existing\_flexible\_ip\_id](#input\_gateway\_existing\_flexible\_ip\_id) | Existing flexible IP ID to attach (overrides gateway\_reserve\_flexible\_ip) | `string` | `null` | no |

|  [gateway\_refresh\_ssh\_keys](#input\_gateway\_refresh\_ssh\_keys) | Trigger SSH key refresh on gateways (change value to trigger) | `string` | `null` | no |

|  [gateway\_reserve\_flexible\_ip](#input\_gateway\_reserve\_flexible\_ip) | Reserve new flexible IP addresses for gateways | `bool` | `true` | no |

|  [gateway\_type](#input\_gateway\_type) | Gateway instance type: VPC-GW-S (small) or VPC-GW-M (medium) | `string` | `"VPC-GW-S"` | no |

|  [network\_private\_networks](#input\_network\_private\_networks) | Private networks to create with optional names, subnets, and tags | map(object({
    name        = optional(string)           # Network name (defaults to auto-generated)
    ipv4_subnet = optional(string)           # IPv4 CIDR (defaults to auto-assigned /22)
    ipv6_subnet = optional(string)           # IPv6 CIDR (defaults to auto-assigned /64)
    tags        = optional(list(string), []) # Network-specific tags
  }))
 | {
  "default": {
    "ipv4_subnet": null,
    "ipv6_subnet": null,
    "name": null,
    "tags": []
  }
} | no |

|  [organization\_id](#input\_organization\_id) | Organization ID for VPC resources | `string` | n/a | yes |

|  [project\_name](#input\_project\_name) | Project name for VPC resources | `string` | n/a | yes |

|  [vpc\_enable\_custom\_routes](#input\_vpc\_enable\_custom\_routes) | Enable custom route propagation between private networks | `bool` | `true` | no |

|  [vpc\_enable\_routing](#input\_vpc\_enable\_routing) | Enable routing between private networks (cannot be disabled once enabled) | `bool` | `true` | no |

|  [vpc\_name](#input\_vpc\_name) | Name prefix for the VPC and associated resources | `string` | n/a | yes |

|  [vpc\_region](#input\_vpc\_region) | Region where VPC resources will be created (defaults to provider configuration) | `string` | `null` | no |

|  [vpc\_tags](#input\_vpc\_tags) | Tags to apply to all VPC resources | `list(string)` | `[]` | no |

|  [vpc\_zones](#input\_vpc\_zones) | Availability zones for gateway deployment (must belong to vpc\_region if both specified) | `list(string)` | `[]` | no |

## Outputs

| Name | Description |

|------|-------------|

|  [access\_control\_list\_id](#output\_access\_control\_list\_id) | VPC Access Control List ID (null if ACL not created) |

|  [gateway\_flexible\_ip\_addresses](#output\_gateway\_flexible\_ip\_addresses) | Gateway public IP addresses by zone |

|  [gateway\_flexible\_ip\_ids](#output\_gateway\_flexible\_ip\_ids) | Gateway flexible IP resource IDs by zone |

|  [gateway\_ids](#output\_gateway\_ids) | Public gateway IDs by zone |

|  [gateway\_network\_ids](#output\_gateway\_network\_ids) | Gateway network attachment IDs by network-zone pair (e.g., web-fr-par-1) |

|  [ipam\_ip\_addresses](#output\_ipam\_ip\_addresses) | IPAM IP addresses by network-zone pair |

|  [ipam\_ip\_ids](#output\_ipam\_ip\_ids) | IPAM IP resource IDs by network-zone pair |

|  [network\_ipv4\_cidrs](#output\_network\_ipv4\_cidrs) | IPv4 CIDR blocks by network name |

|  [network\_ipv6\_cidrs](#output\_network\_ipv6\_cidrs) | IPv6 CIDR blocks by network name |

|  [network\_private\_network\_ids](#output\_network\_private\_network\_ids) | Private network IDs by network name |

|  [vpc\_id](#output\_vpc\_id) | VPC resource identifier |

## License

Licensed under the Apache License, Version 2.0. See [LICENSE](LICENSE) for full details.

Copyright 2025 - This module is independently maintained and not affiliated with Scaleway.

## Disclaimer

This module is provided "as is" without warranty of any kind, express or implied. The authors and contributors are not responsible for any issues, damages, or losses arising from the use of this module. No official support is provided. Use at your own risk.

[apache]: https://opensource.org/licenses/Apache-2.0

[apache-shield]: https://img.shields.io/badge/License-Apache%202.0-blue.svg

[terraform-badge]: https://img.shields.io/badge/Terraform-%3E%3D1.10-623CE4

[terraform-url]: https://www.terraform.io

[scaleway-badge]: https://img.shields.io/badge/Scaleway%20Provider-%3E%3D2.63-4f0599

[scaleway-url]: https://registry.terraform.io/providers/scaleway/scaleway/

[release-badge]: https://img.shields.io/gitlab/v/release/leminnov/terraform/modules/scaleway-vpc?include_prereleases&sort=semver

[release-url]: https://gitlab.com/leminnov/terraform/modules/scaleway-vpc/-/releases

ecosyste.ms

Data

Tools

Indexes

Applications

Experiments

Awesome

https://github.com/tf-scaleway-modules/terraform-scaleway-network

Awesome Lists containing this project

README