terraform {
  required_providers {
    meraki = {
      source  = "CiscoDevNet/meraki"
      version = "1.9.0"
    }
  }
}

# Búsqueda automática de IDs (Data Sources)
data "meraki_organization" "org" {
  name = var.organization_name
}

data "meraki_networks" "net" {
  organization_id = data.meraki_organization.org.id
}

# Local para extraer el network_id exacto de la lista de redes
locals {
  network_id = [for n in data.meraki_networks.net.items : n.id if n.name == var.network_name][0]
}

# --- CONFIGURACIÓN GATEWAY (MX) ---

# 1. Activar VLANs en el Appliance (MX)
resource "meraki_appliance_vlans_settings" "activate_vlans" {
  network_id    = local.network_id
  vlans_enabled = true
}

# 2. Crear las interfaces L3 y VLANs en el MX
resource "meraki_appliance_vlan" "mx_gateways" {
  for_each   = var.switch_vlans
  depends_on = [meraki_appliance_vlans_settings.activate_vlans]

  network_id         = local.network_id
  vlan_id            = each.key
  name               = each.value.name
  subnet             = each.value.subnet
  appliance_ip       = each.value.appliance_ip
  reserved_ip_ranges = each.value.reserved_ip_ranges
  dhcp_handling      = each.value.dhcp_handling
}

# 3. SSIDs wireless
resource "meraki_wireless_ssid" "ssids" {
  for_each   = { for s in var.wireless_ssids : tostring(s.number) => s }
  depends_on = [meraki_appliance_vlans_settings.activate_vlans]

  network_id         = local.network_id
  number             = each.value.number
  name               = each.value.name
  enabled            = each.value.enabled
  auth_mode          = each.value.auth_mode
  splash_page        = each.value.splash_page
  ip_assignment_mode = each.value.ip_assignment_mode
  use_vlan_tagging   = each.value.use_vlan_tagging
  default_vlan_id    = each.value.default_vlan_id
  radius_servers = length(each.value.radius_servers) > 0 ? [
    for server in each.value.radius_servers : {
      host   = server.host
      port   = server.port
      secret = var.radius_secret
    }
  ] : []
}

# 4. Reglas de firewall L3
resource "meraki_appliance_l3_firewall_rules" "reglas_firewall" {
  network_id = local.network_id
  rules      = var.firewall_rules
}