import json
from tencentcloud.common import credential
from tencentcloud.common.profile.client_profile import ClientProfile
from tencentcloud.common.profile.http_profile import HttpProfile
from tencentcloud.vpc.v20170312 import vpc_client, models

# 初始化认证信息
cred = credential.Credential("SecretId", "SecretKey")
http_profile = HttpProfile()
http_profile.endpoint = "vpc.tencentcloudapi.com"

client_profile = ClientProfile()
client_profile.httpProfile = http_profile
client = vpc_client.VpcClient(cred, "ap-guangzhou", client_profile)

# 创建安全组请求
req = models.CreateSecurityGroupRequest()
req.GroupName = "MailServer-SG"
req.GroupDescription = "Security group for mail server"
req.SecurityGroupPolicySet = models.SecurityGroupPolicySet()

# 添加入站规则
ingress_rules = [
    {"Protocol": "TCP", "Port": "25", "CidrBlock": "0.0.0.0/0", "Action": "ACCEPT", "PolicyDescription": "SMTP"},
    {"Protocol": "TCP", "Port": "465", "CidrBlock": "0.0.0.0/0", "Action": "ACCEPT", "PolicyDescription": "SMTPS"},
    {"Protocol": "TCP", "Port": "143", "CidrBlock": "0.0.0.0/0", "Action": "ACCEPT", "PolicyDescription": "IMAP"},
    {"Protocol": "TCP", "Port": "993", "CidrBlock": "0.0.0.0/0", "Action": "ACCEPT", "PolicyDescription": "IMAPS"},
    {"Protocol": "TCP", "Port": "110", "CidrBlock": "0.0.0.0/0", "Action": "ACCEPT", "PolicyDescription": "POP3"},
    {"Protocol": "TCP", "Port": "995", "CidrBlock": "0.0.0.0/0", "Action": "ACCEPT", "PolicyDescription": "POP3S"}
]

req.SecurityGroupPolicySet.Ingress = [models.SecurityGroupPolicy(**rule) for rule in ingress_rules]

# 添加出站规则
egress_rules = [
    {"Protocol": "TCP", "Port": "25", "CidrBlock": "0.0.0.0/0", "Action": "ACCEPT", "PolicyDescription": "SMTP"},
    {"Protocol": "TCP", "Port": "465", "CidrBlock": "0.0.0.0/0", "Action": "ACCEPT", "PolicyDescription": "SMTPS"}
]

req.SecurityGroupPolicySet.Egress = [models.SecurityGroupPolicy(**rule) for rule in egress_rules]

# 发送请求
resp = client.CreateSecurityGroup(req)
print(json.dumps(resp.to_json_string(), indent=2))