Merge pull request #38 from trailofbits/ec2-doc-update

EC2 doc updates
This commit is contained in:
Jack Ivanov 2016-08-01 19:05:55 +03:00 committed by GitHub
commit cb12fb30a0
2 changed files with 22 additions and 1 deletions

View file

@ -33,8 +33,14 @@ Algo (short for "Al Gore", the **V**ice **P**resident of **N**etworks everywhere
* Open the file `config.cfg` in your favorite text editor. Change `server_name` and specify users in the `users` list.
* Start the deploy and follow the instructions:
```
ansible-playbook deploy.yml
ansible-playbook deploy.yml -e "provider=PROVIDER"
```
Available providers:
digiocean - Digital Ocean
ec2 - Amazon AWS EC2 (see EC2 section below)
* When the process is done, you can find `.mobileconfig` files and certificates in the `configs` directory. Send the `.mobileconfig` profile to your users on iOS or macOS (note: Profile installation is supported over AirDrop) or send the X.509 certificates to those using other clients, like Windows or Android.
* When the deploy proccess is done a new server will be placed in the local inventory file `inventory_users`.
* If you want to add or delete users, update the `users` list in `config.cfg` and run the playbook `users.yml`. This command will update users on all the servers in the file `inventory_users`. If you want to limit servers it updates, you can use `-l` flag.
@ -43,6 +49,21 @@ ansible-playbook users.yml -i inventory_users
ansible-playbook users.yml -i inventory_users -l example.com
```
### EC2
#### Deployment
Before using the AWS EC2 playbook you must setup ENV vars with your credentials.
```
declare -x AWS_ACCESS_KEY_ID="XXXXXXXXXXXXXXXXXXX"
declare -x AWS_SECRET_ACCESS_KEY="XXXXXXXXXXXXXXXxx"
```
#### User management
User management for EC2 currently uses Algo's inventory_users NOT EC2 dynamic inventory. This may be subject to change in the future.
```
ansible-playbook users.yml -u ubuntu -i inventory_users
```
## FAQ
### Has this been audited?