diff --git a/fmt/main_net_dns_router/terraform.tfstate b/fmt/main_net_dns_router/terraform.tfstate
new file mode 100644
index 0000000..824f0dc
--- /dev/null
+++ b/fmt/main_net_dns_router/terraform.tfstate
@@ -0,0 +1 @@
+{"version":4,"terraform_version":"1.11.6","serial":2,"lineage":"4745dd5f-79b4-5155-fd33-7bbf5c0c3f5e","outputs":{"almalinux_9":{"value":{"name":"AlmaLinux-9.0-20220718","uuid":"541650fc-dd19-4f38-bb1d-7333ed9dd688"},"type":["map","string"]},"availability_zone_no_gpu_name":{"value":"cnr-isti-nova-a","type":"string"},"availability_zone_with_gpu_name":{"value":"cnr-isti-nova-gpu-a","type":"string"},"availability_zones_names":{"value":{"availability_zone_no_gpu":"cnr-isti-nova-a","availability_zone_with_gpu":"cnr-isti-nova-gpu-a"},"type":["map","string"]},"centos_7":{"value":{"name":"CentOS-7","user_data_file":"../../s2i2s_openstack_vm_data_scripts/el.sh","uuid":"f0187a99-64f6-462a-ab5f-ef52fe62f2ca"},"type":["map","string"]},"default_security_group_name":{"value":"default_for_all","type":"string"},"dns_zone":{"value":{"attributes":null,"description":"DNS primary zone for the FMT project","disable_status_check":false,"email":"postmaster@isti.cnr.it","id":"16477209-e4ff-4fb1-b143-cc6d5ecb52e7","masters":null,"name":"fmt.cloud.isti.cnr.it.","project_id":"3100ec634ead45ec9301a57c55da1d91","region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"PRIMARY","value_specs":null},"type":["object",{"attributes":["map","string"],"description":"string","disable_status_check":"bool","email":"string","id":"string","masters":["set","string"],"name":"string","project_id":"string","region":"string","timeouts":["object",{"create":"string","delete":"string","update":"string"}],"ttl":"number","type":"string","value_specs":["map","string"]}]},"dns_zone_id":{"value":"16477209-e4ff-4fb1-b143-cc6d5ecb52e7","type":"string"},"el7_data_file":{"value":"../../s2i2s_openstack_vm_data_scripts/el.sh","type":"string"},"external_gateway_ip":{"value":[{"ip_address":"146.48.30.192","subnet_id":"57f87509-4016-46fb-b8c3-25fca7f72ccb"}],"type":["list",["object",{"ip_address":"string","subnet_id":"string"}]]},"external_network":{"value":{"id":"1d2ff137-6ff7-4017-be2b-0d6c4af2353b","name":"external-network"},"type":["map","string"]},"external_network_id":{"value":"1d2ff137-6ff7-4017-be2b-0d6c4af2353b","type":"string"},"flavor_list":{"value":{"c1_large":"c1.large","c1_medium":"c1.medium","c1_small":"c1.small","c2_large":"c2.large","m1_large":"m1.large","m1_medium":"m1.medium","m1_xlarge":"m1.xlarge","m1_xxl":"m1.xxl","m2_large":"m2.large","m2_medium":"m2.medium","m2_small":"m2.small","m3_large":"m3.large"},"type":["map","string"]},"floating_ip_pools":{"value":{"main_public_ip_pool":"external-network"},"type":["map","string"]},"main_private_network":{"value":{"admin_state_up":true,"all_tags":[],"availability_zone_hints":[],"description":"FMT private network (use this as the main network)","dns_domain":"fmt.cloud.isti.cnr.it.","external":false,"id":"34c204ae-4cab-45a6-b18c-a326d708f18d","mtu":8942,"name":"fmt-cloud-main","port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","segments":[{"network_type":"geneve","physical_network":"","segmentation_id":1499}],"shared":false,"tags":null,"tenant_id":"3100ec634ead45ec9301a57c55da1d91","timeouts":null,"transparent_vlan":false,"value_specs":null},"type":["object",{"admin_state_up":"bool","all_tags":["set","string"],"availability_zone_hints":["set","string"],"description":"string","dns_domain":"string","external":"bool","id":"string","mtu":"number","name":"string","port_security_enabled":"bool","qos_policy_id":"string","region":"string","segments":["set",["object",{"network_type":"string","physical_network":"string","segmentation_id":"number"}]],"shared":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"create":"string","delete":"string"}],"transparent_vlan":"bool","value_specs":["map","string"]}]},"main_private_network_id":{"value":"34c204ae-4cab-45a6-b18c-a326d708f18d","type":"string"},"main_region":{"value":"isti_area_pi_1","type":"string"},"main_subnet_network":{"value":{"all_tags":[],"allocation_pool":[{"end":"10.15.7.254","start":"10.15.1.1"}],"cidr":"10.15.0.0/21","description":"FMT main private subnet","dns_nameservers":["146.48.29.97","146.48.29.98","146.48.29.99"],"dns_publish_fixed_ip":false,"enable_dhcp":true,"gateway_ip":"10.15.0.1","id":"593f2a27-1910-400b-a185-a9707fb0efee","ip_version":4,"ipv6_address_mode":"","ipv6_ra_mode":"","name":"fmt-cloud-main-subnet","network_id":"34c204ae-4cab-45a6-b18c-a326d708f18d","no_gateway":false,"prefix_length":null,"region":"isti_area_pi_1","segment_id":"","service_types":[],"subnetpool_id":"","tags":null,"tenant_id":"3100ec634ead45ec9301a57c55da1d91","timeouts":null,"value_specs":null},"type":["object",{"all_tags":["set","string"],"allocation_pool":["set",["object",{"end":"string","start":"string"}]],"cidr":"string","description":"string","dns_nameservers":["list","string"],"dns_publish_fixed_ip":"bool","enable_dhcp":"bool","gateway_ip":"string","id":"string","ip_version":"number","ipv6_address_mode":"string","ipv6_ra_mode":"string","name":"string","network_id":"string","no_gateway":"bool","prefix_length":"number","region":"string","segment_id":"string","service_types":["list","string"],"subnetpool_id":"string","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"create":"string","delete":"string"}],"value_specs":["map","string"]}]},"main_subnet_network_id":{"value":"593f2a27-1910-400b-a185-a9707fb0efee","type":"string"},"mtu_size":{"value":8942,"type":"number"},"os_project_data":{"value":{"id":"3100ec634ead45ec9301a57c55da1d91","name":"fmt-lab-cloud"},"type":["map","string"]},"policy_list":{"value":{"affinity":"affinity","anti_affinity":"anti-affinity","soft_affinity":"soft-affinity","soft_anti_affinity":"soft-anti-affinity"},"type":["map","string"]},"resolvers_ip":{"value":["146.48.29.97","146.48.29.98","146.48.29.99"],"type":["list","string"]},"ssh_sources":{"value":{"d4s_vpn_1_cidr":"146.48.122.27/32","d4s_vpn_2_cidr":"146.48.122.49/32","infrascience_net_cidr":"146.48.122.0/23","isti_net_cidr":"146.48.80.0/21","isti_vpn_gw1":"146.48.80.101/32","isti_vpn_gw2":"146.48.80.102/32","isti_vpn_gw3":"146.48.80.103/32","s2i2s_net_cidr":"146.48.28.0/22","s2i2s_vpn_1_cidr":"146.48.28.10/32","s2i2s_vpn_2_cidr":"146.48.28.11/32","shell_d4s_cidr":"146.48.122.95/32"},"type":["map","string"]},"ubuntu2204_data_file":{"value":"../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh","type":"string"},"ubuntu_2204":{"value":{"name":"Ubuntu-Jammy-22.04","user_data_file":"../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh","uuid":"54768889-8556-4be4-a2eb-82a4d9b34627"},"type":["map","string"]}},"resources":[{"module":"module.main_private_net_and_dns_zone","mode":"managed","type":"openstack_dns_zone_v2","name":"primary_project_dns_zone","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"attributes":null,"description":"DNS primary zone for the FMT project","disable_status_check":false,"email":"postmaster@isti.cnr.it","id":"16477209-e4ff-4fb1-b143-cc6d5ecb52e7","masters":null,"name":"fmt.cloud.isti.cnr.it.","project_id":"3100ec634ead45ec9301a57c55da1d91","region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"PRIMARY","value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19"}]},{"module":"module.main_private_net_and_dns_zone","mode":"managed","type":"openstack_networking_network_v2","name":"main-private-network","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"all_tags":[],"availability_zone_hints":[],"description":"FMT private network (use this as the main network)","dns_domain":"fmt.cloud.isti.cnr.it.","external":false,"id":"34c204ae-4cab-45a6-b18c-a326d708f18d","mtu":8942,"name":"fmt-cloud-main","port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","segments":[{"network_type":"geneve","physical_network":"","segmentation_id":1499}],"shared":false,"tags":null,"tenant_id":"3100ec634ead45ec9301a57c55da1d91","timeouts":null,"transparent_vlan":false,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0="}]},{"module":"module.main_private_net_and_dns_zone","mode":"managed","type":"openstack_networking_router_interface_v2","name":"private-network-routing","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"force_destroy":false,"id":"84252f3f-9d7f-40d5-836a-7a6d982e5aa9","port_id":"84252f3f-9d7f-40d5-836a-7a6d982e5aa9","region":"isti_area_pi_1","router_id":"d2abd2f9-58ad-4618-bc3e-df1ff4eecb23","subnet_id":"593f2a27-1910-400b-a185-a9707fb0efee","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["module.main_private_net_and_dns_zone.openstack_networking_network_v2.main-private-network","module.main_private_net_and_dns_zone.openstack_networking_router_v2.external-router","module.main_private_net_and_dns_zone.openstack_networking_subnet_v2.main-private-subnet"]}]},{"module":"module.main_private_net_and_dns_zone","mode":"managed","type":"openstack_networking_router_v2","name":"external-router","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"all_tags":[],"availability_zone_hints":[],"description":"FMT main router","distributed":false,"enable_snat":true,"external_fixed_ip":[{"ip_address":"146.48.30.192","subnet_id":"57f87509-4016-46fb-b8c3-25fca7f72ccb"}],"external_network_id":"1d2ff137-6ff7-4017-be2b-0d6c4af2353b","external_qos_policy_id":null,"external_subnet_ids":null,"id":"d2abd2f9-58ad-4618-bc3e-df1ff4eecb23","name":"fmt-lab-cloud-external-router","region":"isti_area_pi_1","tags":null,"tenant_id":"3100ec634ead45ec9301a57c55da1d91","timeouts":null,"value_specs":null,"vendor_options":[{"set_router_gateway_after_create":true}]},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0="}]},{"module":"module.main_private_net_and_dns_zone","mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"default_firewall_rules","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"index_key":"http_from_everywhere","schema_version":0,"attributes":{"description":"HTTP from everywhere","direction":"ingress","ethertype":"IPv4","id":"a410dbeb-e210-4353-afc6-90c03412c4e1","port_range_max":80,"port_range_min":80,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"0.0.0.0/0","security_group_id":"7f61fd0d-a38b-40dd-8b0e-073b3f00aaa6","tenant_id":"d3c30d05b2524faead8fabf0b511622e","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["module.main_private_net_and_dns_zone.openstack_networking_secgroup_v2.default"]},{"index_key":"https_from_everywhere","schema_version":0,"attributes":{"description":"HTTPS from everywhere","direction":"ingress","ethertype":"IPv4","id":"a3b6f76b-2f55-4033-8aa9-a7c07d4d7462","port_range_max":443,"port_range_min":443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"0.0.0.0/0","security_group_id":"7f61fd0d-a38b-40dd-8b0e-073b3f00aaa6","tenant_id":"d3c30d05b2524faead8fabf0b511622e","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["module.main_private_net_and_dns_zone.openstack_networking_secgroup_v2.default"]},{"index_key":"ssh_from_isti_net","schema_version":0,"attributes":{"description":"SSH from the ISTI network","direction":"ingress","ethertype":"IPv4","id":"ab1d66b5-eb47-4705-b479-5d23ed8b08cb","port_range_max":22,"port_range_min":22,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.80.0/21","security_group_id":"7f61fd0d-a38b-40dd-8b0e-073b3f00aaa6","tenant_id":"d3c30d05b2524faead8fabf0b511622e","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["module.main_private_net_and_dns_zone.openstack_networking_secgroup_v2.default"]},{"index_key":"ssh_from_s2i2s_vpn_1","schema_version":0,"attributes":{"description":"SSH from the S2I2S VPN 1","direction":"ingress","ethertype":"IPv4","id":"187bc787-c689-4105-8cfa-48ee3a66c1e3","port_range_max":22,"port_range_min":22,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.28.10/32","security_group_id":"7f61fd0d-a38b-40dd-8b0e-073b3f00aaa6","tenant_id":"d3c30d05b2524faead8fabf0b511622e","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["module.main_private_net_and_dns_zone.openstack_networking_secgroup_v2.default"]},{"index_key":"ssh_from_s2i2s_vpn_2","schema_version":0,"attributes":{"description":"SSH from the S2I2S VPN 2","direction":"ingress","ethertype":"IPv4","id":"c5fe7096-bd16-4ef9-bc54-274a6bcbc3a1","port_range_max":22,"port_range_min":22,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.28.11/32","security_group_id":"7f61fd0d-a38b-40dd-8b0e-073b3f00aaa6","tenant_id":"d3c30d05b2524faead8fabf0b511622e","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["module.main_private_net_and_dns_zone.openstack_networking_secgroup_v2.default"]}]},{"module":"module.main_private_net_and_dns_zone","mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"egress-ipv4","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Allow all the egress traffic","direction":"egress","ethertype":"IPv4","id":"3cfc25c4-ab85-4e2f-818c-319d84e4d322","port_range_max":0,"port_range_min":0,"protocol":"","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"","security_group_id":"7f61fd0d-a38b-40dd-8b0e-073b3f00aaa6","tenant_id":"d3c30d05b2524faead8fabf0b511622e","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["module.main_private_net_and_dns_zone.openstack_networking_secgroup_v2.default"]}]},{"module":"module.main_private_net_and_dns_zone","mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"ingress-icmp","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Allow ICMP from remote","direction":"ingress","ethertype":"IPv4","id":"48de421c-85f8-48cc-a3c4-def4ce2fcf6e","port_range_max":0,"port_range_min":0,"protocol":"icmp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"0.0.0.0/0","security_group_id":"7f61fd0d-a38b-40dd-8b0e-073b3f00aaa6","tenant_id":"d3c30d05b2524faead8fabf0b511622e","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["module.main_private_net_and_dns_zone.openstack_networking_secgroup_v2.default"]}]},{"module":"module.main_private_net_and_dns_zone","mode":"managed","type":"openstack_networking_secgroup_v2","name":"default","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"delete_default_rules":true,"description":"Default security group with rules that allow ssh access from the ISTI networks, http, https","id":"7f61fd0d-a38b-40dd-8b0e-073b3f00aaa6","name":"default_for_all","region":"isti_area_pi_1","stateful":false,"tags":null,"tenant_id":"3100ec634ead45ec9301a57c55da1d91","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="}]},{"module":"module.main_private_net_and_dns_zone","mode":"managed","type":"openstack_networking_subnet_v2","name":"main-private-subnet","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"allocation_pool":[{"end":"10.15.7.254","start":"10.15.1.1"}],"cidr":"10.15.0.0/21","description":"FMT main private subnet","dns_nameservers":["146.48.29.97","146.48.29.98","146.48.29.99"],"dns_publish_fixed_ip":false,"enable_dhcp":true,"gateway_ip":"10.15.0.1","id":"593f2a27-1910-400b-a185-a9707fb0efee","ip_version":4,"ipv6_address_mode":"","ipv6_ra_mode":"","name":"fmt-cloud-main-subnet","network_id":"34c204ae-4cab-45a6-b18c-a326d708f18d","no_gateway":false,"prefix_length":null,"region":"isti_area_pi_1","segment_id":"","service_types":[],"subnetpool_id":"","tags":null,"tenant_id":"3100ec634ead45ec9301a57c55da1d91","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["module.main_private_net_and_dns_zone.openstack_networking_network_v2.main-private-network"]}]}],"check_results":null}