data "oci_identity_availability_domains" "available" {
  compartment_id = local.compartment_id
}

resource "oci_core_vcn" "relay" {
  compartment_id = local.compartment_id
  cidr_blocks    = [var.vcn_cidr]
  display_name   = "oci-l4-relay"
  dns_label      = "ocil4relay"
  freeform_tags  = var.freeform_tags
}

resource "oci_core_internet_gateway" "relay" {
  compartment_id = local.compartment_id
  vcn_id         = oci_core_vcn.relay.id
  display_name   = "oci-l4-relay"
  enabled        = true
  freeform_tags  = var.freeform_tags
}

resource "oci_core_route_table" "relay" {
  compartment_id = local.compartment_id
  vcn_id         = oci_core_vcn.relay.id
  display_name   = "oci-l4-relay"
  freeform_tags  = var.freeform_tags

  route_rules {
    destination       = "0.0.0.0/0"
    destination_type  = "CIDR_BLOCK"
    network_entity_id = oci_core_internet_gateway.relay.id
  }
}

resource "oci_core_security_list" "relay" {
  compartment_id = local.compartment_id
  vcn_id         = oci_core_vcn.relay.id
  display_name   = "oci-l4-relay-empty"
  freeform_tags  = var.freeform_tags
}

resource "oci_core_subnet" "relay" {
  compartment_id             = local.compartment_id
  vcn_id                     = oci_core_vcn.relay.id
  cidr_block                 = var.subnet_cidr
  display_name               = "oci-l4-relay"
  dns_label                  = "relay"
  prohibit_internet_ingress  = false
  prohibit_public_ip_on_vnic = false
  route_table_id             = oci_core_route_table.relay.id
  security_list_ids          = [oci_core_security_list.relay.id]
  freeform_tags              = var.freeform_tags
}

resource "oci_core_network_security_group" "relay" {
  compartment_id = local.compartment_id
  vcn_id         = oci_core_vcn.relay.id
  display_name   = "oci-l4-relay"
  freeform_tags  = var.freeform_tags
}