resource "google_compute_instance" "backend" {
  name         = "backend"
  machine_type = "n1-standard-1"
  zone         = var.zone

  boot_disk {
    initialize_params {
      image = var.image
    }
  }

  network_interface {
    network = module.network.network_name

    access_config {
      // Ephemeral IP
    }
  }

  metadata_startup_script = var.startup_script
  tags = ["backend"]
}

resource "google_compute_instance" "frontend" {
  name         = "frontend"
  machine_type = "n1-standard-1"
  zone         = var.zone

  boot_disk {
    initialize_params {
      image = var.image
    }
  }

  network_interface {
    network = module.network.network_name

    access_config {
      // Ephemeral IP
    }
  }

  metadata_startup_script = var.startup_script
  tags = ["frontend"]
}

resource "google_compute_firewall" "fw_fe" {
  name    = "fw-fe"
  network = module.network.network_name

  allow {
    protocol = "tcp"
    ports    = ["8080"]
  }

  source_tags = ["frontend"]
}

resource "google_compute_firewall" "fw_be" {
  name    = "fw-be"
  network = module.network.network_name

  allow {
    protocol = "tcp"
    ports    = ["8081-8082"]
  }

  source_tags = ["backend"]
}