mirror of
https://github.com/trailofbits/algo.git
synced 2025-08-13 08:13:01 +02:00
Modify naming in the cloud resources and client config files
This commit is contained in:
parent
98a1867c0e
commit
f8db81fa8b
5 changed files with 20 additions and 32 deletions
|
@ -16,13 +16,13 @@
|
|||
- name: Create AlgoVPN Server
|
||||
azure_rm_deployment:
|
||||
state: present
|
||||
deployment_name: "AlgoVPN-{{ algo_server_name }}"
|
||||
deployment_name: "{{ algo_server_name }}"
|
||||
template: "{{ lookup('file', 'deployment.json') }}"
|
||||
secret: "{{ secret }}"
|
||||
tenant: "{{ tenant }}"
|
||||
client_id: "{{ client_id }}"
|
||||
subscription_id: "{{ subscription_id }}"
|
||||
resource_group_name: "AlgoVPN-{{ algo_server_name }}"
|
||||
resource_group_name: "{{ algo_server_name }}"
|
||||
parameters:
|
||||
AlgoServerName:
|
||||
value: "{{ algo_server_name }}"
|
||||
|
|
|
@ -21,9 +21,7 @@ Resources:
|
|||
InstanceTenancy: default
|
||||
Tags:
|
||||
- Key: Name
|
||||
Value: Algo
|
||||
- Key: Environment
|
||||
Value: Algo
|
||||
Value: !Ref AWS::StackName
|
||||
|
||||
VPCIPv6:
|
||||
Type: AWS::EC2::VPCCidrBlock
|
||||
|
@ -35,22 +33,18 @@ Resources:
|
|||
Type: AWS::EC2::InternetGateway
|
||||
Properties:
|
||||
Tags:
|
||||
- Key: Environment
|
||||
Value: Algo
|
||||
- Key: Name
|
||||
Value: Algo
|
||||
Value: !Ref AWS::StackName
|
||||
|
||||
Subnet:
|
||||
Type: AWS::EC2::Subnet
|
||||
Properties:
|
||||
CidrBlock: 172.16.254.0/23
|
||||
MapPublicIpOnLaunch: false
|
||||
Tags:
|
||||
- Key: Environment
|
||||
Value: Algo
|
||||
- Key: Name
|
||||
Value: Algo
|
||||
VpcId: !Ref VPC
|
||||
Tags:
|
||||
- Key: Name
|
||||
Value: !Ref AWS::StackName
|
||||
|
||||
VPCGatewayAttachment:
|
||||
Type: AWS::EC2::VPCGatewayAttachment
|
||||
|
@ -63,10 +57,8 @@ Resources:
|
|||
Properties:
|
||||
VpcId: !Ref VPC
|
||||
Tags:
|
||||
- Key: Environment
|
||||
Value: Algo
|
||||
- Key: Name
|
||||
Value: Algo
|
||||
Value: !Ref AWS::StackName
|
||||
|
||||
Route:
|
||||
Type: AWS::EC2::Route
|
||||
|
@ -140,9 +132,7 @@ Resources:
|
|||
CidrIp: 0.0.0.0/0
|
||||
Tags:
|
||||
- Key: Name
|
||||
Value: Algo
|
||||
- Key: Environment
|
||||
Value: Algo
|
||||
Value: !Ref AWS::StackName
|
||||
|
||||
EC2Instance:
|
||||
Type: AWS::EC2::Instance
|
||||
|
@ -181,9 +171,7 @@ Resources:
|
|||
cfn-signal -e $? --stack ${AWS::StackName} --resource EC2Instance --region ${AWS::Region}
|
||||
Tags:
|
||||
- Key: Name
|
||||
Value: Algo
|
||||
- Key: Environment
|
||||
Value: Algo
|
||||
Value: !Ref AWS::StackName
|
||||
|
||||
ElasticIP:
|
||||
Type: AWS::EC2::EIP
|
||||
|
|
|
@ -8,8 +8,8 @@
|
|||
|
||||
- name: Network configured
|
||||
gce_net:
|
||||
name: "algo-net-{{ algo_server_name }}"
|
||||
fwname: "algo-net-{{ algo_server_name }}-fw"
|
||||
name: "{{ algo_server_name }}"
|
||||
fwname: "{{ algo_server_name }}-fw"
|
||||
allowed: "udp:500,4500,{{ wireguard_port }};tcp:22"
|
||||
state: "present"
|
||||
mode: auto
|
||||
|
@ -45,7 +45,7 @@
|
|||
credentials_file: "{{ credentials_file_path }}"
|
||||
project_id: "{{ project_id }}"
|
||||
metadata: '{"ssh-keys":"ubuntu:{{ ssh_public_key_lookup }}"}'
|
||||
network: "algo-net-{{ algo_server_name }}"
|
||||
network: "{{ algo_server_name }}"
|
||||
tags:
|
||||
- "environment-algo"
|
||||
register: google_vm
|
||||
|
|
|
@ -85,7 +85,7 @@ Save the embedded CA cert and encrypted user PKCS12 file.
|
|||
$ErrorActionPreference = "Stop"
|
||||
|
||||
$VpnServerAddress = "{{ IP_subject_alt_name }}"
|
||||
$VpnName = "Algo VPN {{ IP_subject_alt_name }} IKEv2"
|
||||
$VpnName = "AlgoVPN {{ algo_server_name }} IKEv2"
|
||||
$VpnUser = "{{ item.0 }}"
|
||||
$CaCertificateBase64 = "{{ PayloadContentCA }}"
|
||||
$UserPkcs12Base64 = "{{ item.1.stdout }}"
|
||||
|
|
|
@ -112,7 +112,7 @@
|
|||
<key>PayloadDescription</key>
|
||||
<string>Configures VPN settings</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>VPN</string>
|
||||
<string>{{ algo_server_name }}</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.vpn.managed.{{ VPN_PayloadIdentifier }}</string>
|
||||
<key>PayloadType</key>
|
||||
|
@ -129,7 +129,7 @@
|
|||
<integer>0</integer>
|
||||
</dict>
|
||||
<key>UserDefinedName</key>
|
||||
<string>Algo VPN {{ IP_subject_alt_name }} IKEv2</string>
|
||||
<string>AlgoVPN {{ algo_server_name }} IKEv2</string>
|
||||
<key>VPNType</key>
|
||||
<string>IKEv2</string>
|
||||
</dict>
|
||||
|
@ -145,7 +145,7 @@
|
|||
<key>PayloadDescription</key>
|
||||
<string>Adds a PKCS#12-formatted certificate</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>{{ item.0 }}.p12</string>
|
||||
<string>{{ algo_server_name }}</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.security.pkcs12.{{ pkcs12_PayloadCertificateUUID }}</string>
|
||||
<key>PayloadType</key>
|
||||
|
@ -165,7 +165,7 @@
|
|||
<key>PayloadDescription</key>
|
||||
<string>Adds a CA root certificate</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>{{ IP_subject_alt_name }}</string>
|
||||
<string>{{ algo_server_name }}</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.security.root.{{ CA_PayloadIdentifier }}</string>
|
||||
<key>PayloadType</key>
|
||||
|
@ -177,7 +177,7 @@
|
|||
</dict>
|
||||
</array>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>{{ IP_subject_alt_name }} IKEv2</string>
|
||||
<string>AlgoVPN {{ algo_server_name }} IKEv2</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>donut.local.{{ 500000 | random | to_uuid | upper }}</string>
|
||||
<key>PayloadOrganization</key>
|
||||
|
|
Loading…
Add table
Reference in a new issue