general-ip-settings.tf

resource "routeros_ip_service" "api" {
  numbers  = "api"
  port     = "8728"
  disabled = "true"
}

resource "routeros_ip_service" "api-ssl" {
  numbers     = "api-ssl"
  port        = "8729"
  disabled    = false
  tls_version = "only-1.2"
  certificate = routeros_system_certificate.scep_client.name
}

resource "routeros_ip_service" "ftp" {
  numbers  = "ftp"
  port     = "21"
  disabled = "true"
}

resource "routeros_ip_service" "telnet" {
  numbers  = "telnet"
  port     = "23"
  disabled = "true"
}

resource "routeros_ip_service" "www" {
  numbers  = "www"
  port     = "80"
  disabled = var.device_settings.root_ca ? "false" : "true"
}

resource "routeros_ip_service" "www-ssl" {
  numbers     = "www-ssl"
  port        = "443"
  disabled    = false
  tls_version = "only-1.2"
  certificate = routeros_system_certificate.scep_client.name
}