locals-agic.tf

locals {
  appgw_default_settings = {
    ip_name                             = "${local.appgw_name}-pip"
    ip_sku                              = "Standard"
    ip_allocation_method                = "Static"
    frontend_ip_configuration_name      = "${local.appgw_name}-frontipconfig"
    frontend_priv_ip_configuration_name = "${local.appgw_name}-frontipconfig-priv"
    gateway_ip_configuration_name       = "${local.appgw_name}-ipconfig"
    sku_name                            = "Standard_v2"
    sku_tier                            = "Standard_v2"
    sku_capacity                        = 2
    zones                               = ["1", "2", "3"]
    policy_name                         = "AppGwSslPolicy20170401S"
    enabled_waf                         = false
    file_upload_limit_mb                = "100"
    max_request_body_size_kb            = "128"
    request_body_check                  = true
    rule_set_type                       = "OWASP"
    rule_set_version                    = "3.0"
    firewall_mode                       = "Detection"

    app_gateway_tags = local.default_tags
    ip_tags          = local.default_tags
    appgw_backend_http_settings = [{
      name                  = "dummy"
      cookie_based_affinity = "Disabled"
      path                  = "/"
      port                  = 80
      protocol              = "Http"
      request_timeout       = 1
      probe_name            = "dummy"
    }]
    appgw_backend_pools = [{
      name  = "dummy"
      fqdns = ["dummy"]
    }]
    appgw_probes = [{
      host                                      = "dummy"
      interval                                  = 30
      minimum_servers                           = 0
      name                                      = "dummy"
      path                                      = "/"
      pick_host_name_from_backend_http_settings = false
      protocol                                  = "Http"
      timeout                                   = 30
      unhealthy_threshold                       = 3
      match_status_code                         = ["200"]
    }]
    appgw_routings = [{
      name                       = "dummy"
      rule_type                  = "Basic"
      http_listener_name         = "dummy"
      backend_address_pool_name  = "dummy"
      backend_http_settings_name = "dummy"

    }]
    appgw_http_listeners = [{
      name                           = "dummy"
      frontend_ip_configuration_name = local.frontend_ip_configuration_name
      frontend_port_name             = "dummy"
      protocol                       = "Http"
      host_name                      = "dummy"
    }]
    appgw_rewrite_rule_set = []
    frontend_port_settings = [{
      name = "dummy"
      port = 80
    }]
    ssl_certificates_configs = []
    identity                 = var.appgw_identity_enabled ? azurerm_user_assigned_identity.appgw_assigned_identity[0].id : null
  }

  appgw_settings                 = merge(local.appgw_default_settings, var.appgw_settings)
  frontend_ip_configuration_name = var.private_ingress ? "${local.appgw_name}-frontipconfig-priv" : "${local.appgw_name}-frontipconfig"
}