locals {
  project     = "syslog-server"
  account_id  = "011934824531"
  environment = "prod"

  hcp_project   = "seahaven-prod"
  hcp_workspace = "syslog-server-prod"
  apply_role    = "hcptf-syslog-server"
  plan_role     = "hcptf-syslog-server-plan"
  stack_name    = local.project
  stack_prefix  = "syslog-server-"

  instance_role_name    = "syslog-server-role"
  instance_profile_name = "syslog-server-profile"
  boundary_name         = "syslog-server-instance-boundary"
  log_group_name        = "unifi-syslog"
  site_alerts_arn       = "arn:aws:sns:${var.aws_region}:${local.account_id}:site-alerts"

  vpc_cidr           = "10.40.0.0/16"
  public_subnet_cidr = "10.40.10.0/24"
  office_cidrs       = ["47.21.61.4/32", "96.250.164.146/32"]
  office_vpn_cidr    = "10.10.0.0/16"
  vpn_pool_cidr      = "10.30.0.0/16"
  syslog_vpc_cidr    = local.vpc_cidr
  syslog_ingress_cidrs = concat(
    local.office_cidrs,
    [local.office_vpn_cidr, local.vpn_pool_cidr, local.syslog_vpc_cidr],
  )
  ssh_ingress_cidrs = concat(
    local.office_cidrs,
    [local.office_vpn_cidr, local.syslog_vpc_cidr],
  )
}