# Network Load Balancer Stack for Dev Domain Controllers =======================

module "context" {
  source = "../../modules/context"
  #   source  = "hcassc.jfrog.io/iac-tf-modules-virtual__context/shared/aws"
  #   version = "< 1.0"

  stack_name          = "lb-stack-domain-controllers-dev"
  application_name    = "domain-controllers"
  project             = "DC-Migration-Project"
  cost_center_opex    = "271"
  cost_center_capex   = "000"
  environment         = "dev"
  data_classification = "internal"
  availability_tier   = "tier-1"
  app_owner           = "platform-team"
  team                = "platform-team"
  assignment_group    = "TBD"
  owner               = "something@example.com"
  business_unit       = "TBD"

  additional_tags = {}
}

module "nlb_domain_controllers" {
  source = "../../modules/lb-standard"
  #   source  = "hcassc.jfrog.io/iac-tf-modules-virtual__compute/lb-standard/aws"
  #   version = "0.2.0"

  name_prefix = "hca-${module.context.environment}-internal"
  name_suffix = "domain-controllers"

  load_balancer_type = "network"
  internal           = true
  subnet_ids         = ["subnet-053ff6b64dc79fb66", "subnet-00005bd4bf13d2c76"]
  security_group_ids = ["sg-0da64a4d5448c052e"]

  deletion_protection       = true
  cross_zone_load_balancing = true

  target_groups = {
    ldaps = {
      name_suffix = "ldaps"
      port        = 636
      protocol    = "TCP"
      target_type = "ip"
      vpc_id      = "vpc-054b81bf4e8994173"

      targets = {
        dc1 = { id = "172.27.197.68", port = 636 }
        dc2 = { id = "172.27.197.88", port = 636 }
      }

      health_check = {
        protocol            = "TCP"
        interval            = 10
        healthy_threshold   = 3
        unhealthy_threshold = 3
      }
    }
  }

  listeners = {
    ldaps_636 = {
      port             = 636
      protocol         = "TCP"
      target_group_key = "ldaps"
    }
  }

  tags = module.context.tags
}