mirror of
https://github.com/trailofbits/algo.git
synced 2025-05-13 11:24:04 +02:00
parent
0e613f2ff7
commit
d93b7c200f
2 changed files with 23 additions and 2 deletions
|
@ -65,5 +65,9 @@ ipsec_config:
|
||||||
compress: 'yes'
|
compress: 'yes'
|
||||||
fragmentation: 'yes'
|
fragmentation: 'yes'
|
||||||
|
|
||||||
|
ec2_vpc_nets:
|
||||||
|
cidr_block: 172.251.0.0/23
|
||||||
|
subnet_cidr: 172.251.1.0/24
|
||||||
|
|
||||||
# IP address for the proxy and the local dns resolver
|
# IP address for the proxy and the local dns resolver
|
||||||
local_service_ip: 172.16.0.1
|
local_service_ip: 172.16.0.1
|
||||||
|
|
|
@ -23,13 +23,25 @@
|
||||||
with_file: "{{ ssh_public_key }}"
|
with_file: "{{ ssh_public_key }}"
|
||||||
register: keypair
|
register: keypair
|
||||||
|
|
||||||
|
- name: Configure EC2 virtual private clouds
|
||||||
|
ec2_vpc:
|
||||||
|
state: present
|
||||||
|
resource_tags: { "Environment":"Algo" }
|
||||||
|
region: "{{ region }}"
|
||||||
|
cidr_block: "{{ ec2_vpc_nets.cidr_block }}"
|
||||||
|
subnets:
|
||||||
|
- cidr: "{{ ec2_vpc_nets.subnet_cidr }}"
|
||||||
|
resource_tags: { "Environment":"Algo" }
|
||||||
|
register: vpc
|
||||||
|
|
||||||
- name: Configure EC2 security group
|
- name: Configure EC2 security group
|
||||||
ec2_group:
|
ec2_group:
|
||||||
aws_access_key: "{{ aws_access_key }}"
|
aws_access_key: "{{ aws_access_key }}"
|
||||||
aws_secret_key: "{{ aws_secret_key }}"
|
aws_secret_key: "{{ aws_secret_key }}"
|
||||||
name: vpn-secgroup
|
name: algo-secgroup
|
||||||
description: Security group for VPN servers
|
description: Security group for VPN servers
|
||||||
region: "{{ region }}"
|
region: "{{ region }}"
|
||||||
|
vpc_id: "{{ vpc.vpc_id }}"
|
||||||
rules:
|
rules:
|
||||||
- proto: udp
|
- proto: udp
|
||||||
from_port: 4500
|
from_port: 4500
|
||||||
|
@ -54,13 +66,18 @@
|
||||||
aws_access_key: "{{ aws_access_key }}"
|
aws_access_key: "{{ aws_access_key }}"
|
||||||
aws_secret_key: "{{ aws_secret_key }}"
|
aws_secret_key: "{{ aws_secret_key }}"
|
||||||
keypair: "VPNKEY"
|
keypair: "VPNKEY"
|
||||||
group: vpn-secgroup
|
group: algo-secgroup
|
||||||
|
vpc_subnet_id: "{{ vpc.subnets[0].id }}"
|
||||||
instance_type: t2.nano
|
instance_type: t2.nano
|
||||||
image: "{{ ami_image }}"
|
image: "{{ ami_image }}"
|
||||||
wait: true
|
wait: true
|
||||||
region: "{{ region }}"
|
region: "{{ region }}"
|
||||||
instance_tags:
|
instance_tags:
|
||||||
name: "{{ aws_server_name }}"
|
name: "{{ aws_server_name }}"
|
||||||
|
exact_count: 1
|
||||||
|
count_tag:
|
||||||
|
name: "{{ aws_server_name }}"
|
||||||
|
assign_public_ip: yes
|
||||||
register: ec2
|
register: ec2
|
||||||
|
|
||||||
- name: Add new instance to host group
|
- name: Add new instance to host group
|
||||||
|
|
Loading…
Add table
Reference in a new issue