initial terraform code

firewall.tf

@@ -0,0 +1,32 @@
+# Hetzner Cloud Firewall
+
+resource "hcloud_firewall" "icmp" {
+  name = "ICMP"
+  rule {
+    direction = "in"
+    protocol  = "icmp"
+    source_ips = [
+      "0.0.0.0/0",
+      "::/0"
+    ]
+  }
+  apply_to {
+    label_selector = "env=prod"
+  }
+}
+
+resource "hcloud_firewall" "ssh" {
+  name = "SSH"
+  rule {
+    direction = "in"
+    protocol  = "tcp"
+    port      = "22"
+    source_ips = [
+      var.ows_gateway.ipv4,
+      var.ows_gateway.ipv6
+    ]
+  }
+  apply_to {
+    label_selector = "env=prod"
+  }
+}