mirror of
https://github.com/trailofbits/algo
synced 2024-11-04 06:00:21 +00:00
d635c76b50
* Change default SSH port * Iptables to ansible_ssh_port * Add Scaleway * permissions and groups fixes * update firewall docs * SSH fixes * add missing cloudinit to cloud-azure * remove ansible_ssh_user from the tests * congrats message fix
59 lines
1.9 KiB
YAML
59 lines
1.9 KiB
YAML
---
|
|
- name: Include prompts
|
|
import_tasks: prompts.yml
|
|
|
|
- block:
|
|
- name: Creating a firewall group
|
|
vultr_firewall_group:
|
|
name: "{{ algo_server_name }}"
|
|
|
|
- name: Creating firewall rules
|
|
vultr_firewall_rule:
|
|
group: "{{ algo_server_name }}"
|
|
protocol: "{{ item.protocol }}"
|
|
port: "{{ item.port }}"
|
|
ip_version: "{{ item.ip }}"
|
|
cidr: "{{ item.cidr }}"
|
|
with_items:
|
|
- { protocol: tcp, port: "{{ ssh_port }}", ip: v4, cidr: "0.0.0.0/0" }
|
|
- { protocol: tcp, port: "{{ ssh_port }}", ip: v6, cidr: "::/0" }
|
|
- { protocol: udp, port: 500, ip: v4, cidr: "0.0.0.0/0" }
|
|
- { protocol: udp, port: 500, ip: v6, cidr: "::/0" }
|
|
- { protocol: udp, port: 4500, ip: v4, cidr: "0.0.0.0/0" }
|
|
- { protocol: udp, port: 4500, ip: v6, cidr: "::/0" }
|
|
- { protocol: udp, port: "{{ wireguard_port }}", ip: v4, cidr: "0.0.0.0/0" }
|
|
- { protocol: udp, port: "{{ wireguard_port }}", ip: v6, cidr: "::/0" }
|
|
|
|
- name: Upload the startup script
|
|
vultr_startup_script:
|
|
name: algo-startup
|
|
script: |
|
|
{{ lookup('template', 'files/cloud-init/base.sh') }}
|
|
mkdir -p /var/lib/cloud/data/ || true
|
|
touch /var/lib/cloud/data/result.json
|
|
|
|
- name: Creating a server
|
|
vultr_server:
|
|
name: "{{ algo_server_name }}"
|
|
startup_script: algo-startup
|
|
hostname: "{{ algo_server_name }}"
|
|
os: "{{ cloud_providers.vultr.os }}"
|
|
plan: "{{ cloud_providers.vultr.size }}"
|
|
region: "{{ algo_vultr_region }}"
|
|
firewall_group: "{{ algo_server_name }}"
|
|
state: started
|
|
tag: Environment:Algo
|
|
ipv6_enabled: true
|
|
auto_backup_enabled: false
|
|
notify_activate: false
|
|
register: vultr_server
|
|
|
|
- set_fact:
|
|
cloud_instance_ip: "{{ vultr_server.vultr_server.v4_main_ip }}"
|
|
ansible_ssh_user: algo
|
|
ansible_ssh_port: "{{ ssh_port }}"
|
|
cloudinit: true
|
|
|
|
environment:
|
|
VULTR_API_CONFIG: "{{ algo_vultr_config }}"
|