Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Sharing some changes #8

Open
wants to merge 18 commits into
base: master
Choose a base branch
from
Open

Sharing some changes #8

wants to merge 18 commits into from

Conversation

Tycale
Copy link

@Tycale Tycale commented Jul 5, 2023

Hi !

Thanks for your work on this project. I have taken the liberty to update it. Here are the modifications I made, which you might find useful:

  • The SSH key has been made optional
  • Ability to access the server through SSM
  • The init-cloud script now captures the Wireguard private key, preventing its exposure in the .tfstate file
  • The system is updated to the latest LTS Ubuntu
  • Opted for a more cost-effective AWS ARM64 (t4g) instance
  • Migrated from launch configuration (now deprecated) to launch template
  • Using templatefile instead of the now deprecated template hashicorp provider

Special thanks to @gustav-b for his valuable suggestions.

Tycale and others added 18 commits June 9, 2023 18:40
@Tycale
Add install_ssm input to install AWS Session Manager
57f75f5 
Signed-off-by: Thibault Gérondal <[email protected]>
@Tycale
Add parameter to the README.md
f7d83cb 
Signed-off-by: Thibault Gérondal <[email protected]>
@Tycale
Change ssh_key_id to optional
6341723 
Signed-off-by: Thibault Gérondal <[email protected]>
@Tycale
Set types to all variables + use t4g instance
c5c09e2 
The t4g instance are cheaper

Signed-off-by: Thibault Gérondal <[email protected]>
@Tycale
terraform fmt
789d589 
Signed-off-by: Thibault Gérondal <[email protected]>
@Tycale
Remove obsolete comments
36b9697 
Signed-off-by: Thibault Gérondal <[email protected]>
@Tycale
update readme for default t4g instance
a2db95e 
Signed-off-by: Thibault Gérondal <[email protected]>
@Tycale
fix: AWS SSM package must depend of ami_arch
f6bb030 
Signed-off-by: Thibault Gérondal <[email protected]>
@Tycale
Find wg_server_interface automatically if not set
6c759d4 
Ubunut 22.04 does not use eth0..n for its interfaces

Signed-off-by: Thibault Gérondal <[email protected]>
@Tycale
upgrade launch configuration to launch template
ab008e7 
Signed-off-by: Thibault Gérondal <[email protected]>
@Tycale
fix associate_public_ip_address
f1f2701 
Signed-off-by: Thibault Gérondal <[email protected]>
@Tycale
Use templatefile
41782e8 
Signed-off-by: Thibault Gérondal <[email protected]>
@Tycale
ssm agent is already installed on recent LTS ubuntu
f4789cf 
Signed-off-by: Thibault Gérondal <[email protected]>
@Tycale
Improve security by enforcing IMDSv2 tokens
f714062 
Signed-off-by: Thibault Gérondal <[email protected]>
@Tycale
wireguard-dkms is not necessary on newer kernel
bb04ea8 
Signed-off-by: Thibault Gérondal <[email protected]>
@Tycale
Get SSM private key from the EC2 instance
994b9d7 
Signed-off-by: Thibault Gérondal <[email protected]>
@Tycale
AmazonEC2RoleforSSM policy will soon be deprecated
6711d97 
Signed-off-by: Thibault Gérondal <[email protected]>
@Tycale
Add parameter wg_allowed_cidr_blocks
7177033 
Signed-off-by: Thibault Gérondal <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@Tycale @gustav-b