resource "aws_vpc" "sgtm_vpc" {
  cidr_block           = var.vpc_cidr
  enable_dns_hostnames = true
  enable_dns_support   = true

  tags = {
    name = "dev"
  }
}

resource "aws_subnet" "sptm_public_subnet" {
  vpc_id                  = aws_vpc.sgtm_vpc.id
  cidr_block              = var.public_cidr
  map_public_ip_on_launch = true
  availability_zone       = "us-east-1a"

  tags = {
    name = "dev-public"
  }
}

resource "aws_internet_gateway" "sgtm_internet_gateway" {
  vpc_id = aws_vpc.sgtm_vpc.id

  tags = {
    name = "dev-igw"
  }
}

resource "aws_route_table" "sgtm_public_rt" {
  vpc_id = aws_vpc.sgtm_vpc.id

  tags = {
    name = "dev_public_rt"
  }
}

resource "aws_route" "default_route" {
  route_table_id         = aws_route_table.sgtm_public_rt.id
  destination_cidr_block = "0.0.0.0/0"
  gateway_id             = aws_internet_gateway.sgtm_internet_gateway.id
}

resource "aws_route_table_association" "sgtm_public_assoc" {
  subnet_id      = aws_subnet.sptm_public_subnet.id
  route_table_id = aws_route_table.sgtm_public_rt.id
}

resource "aws_security_group" "sgtm_sg" {
  name        = "dev-sg"
  description = "dev security group"
  vpc_id      = aws_vpc.sgtm_vpc.id

  ingress {
    from_port   = 0
    to_port     = 0
    protocol    = "-1"
    cidr_blocks = [var.allowed_ingress_cidr]
  }

  egress {
    from_port   = 0
    to_port     = 0
    protocol    = "-1"
    cidr_blocks = ["0.0.0.0/0"]
  }
}

resource "tls_private_key" "key" {
  algorithm   = var.tls_key_algorithm
}

resource "aws_key_pair" "sgtm_auth" {
  key_name   = "${var.name_prefix}-key-${var.name_suffix}"
  public_key = tls_private_key.key.public_key_openssh

  provisioner "local-exec" {
    command = <<EOF
      echo "${tls_private_key.key.private_key_pem}" > key.pem
      chmod 0600 key.pem
EOF
  }
}

resource "aws_instance" "dev_node" {
    instance_type = var.instance_type
    ami = data.aws_ami.server_ami.id
    key_name = aws_key_pair.sgtm_auth.id
    vpc_security_group_ids = [aws_security_group.sgtm_sg.id]
    subnet_id = aws_subnet.sptm_public_subnet.id
    user_data = file ("userdata.tpl")

    root_block_device {
        volume_size = 10
    }

    tags = {
        name = "dev-node"
    }

}