Skip to content

Commit c5251e2

Browse files
author
Christopher M. Neill
committed
EC2 stuff
1 parent 17309c6 commit c5251e2

17 files changed

Lines changed: 1283 additions & 0 deletions

‎ansible/beta-hosts/variables‎

Lines changed: 37 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -60,3 +60,40 @@ rabbit_username=o2mdLh9N9Ke2GzhoK8xsruYPhIQFN7iEL44dQJoq7OM
6060
registry_host=10.20.1.55
6161
swarm_token=d363b783f03a845a2c82b081bfe8443e
6262
user_content_domain=runnablecloud.com
63+
64+
[ec2:vars]
65+
env=beta
66+
aws_custid=437258487404
67+
vpc_id=vpc-9e84e1fb
68+
security_groups:
69+
- sg_api
70+
- sg_bastion
71+
- default
72+
- sg_dock
73+
- sg_hipache
74+
- sg_mongo
75+
- sg_nat
76+
- sg_navi
77+
- sg_neo4j
78+
- sg_rabbit
79+
- sg_rds
80+
- sg_redis
81+
- sg_services
82+
- sg_userland
83+
- sg_web
84+
sg_api=sg-a6e684c2
85+
sg_bastion=sg-6bc8060f
86+
sg_default=sg-87ca04e3
87+
sg_dock=sg-d6e684b2
88+
sg_hipache=sg-1935727d
89+
sg_mongo=sg-13c30d77
90+
sg_nat=sg-4f07742b
91+
sg_navi=sg-8de684e9
92+
sg_neo4j=sg-78dd131c
93+
sg_rabbit=sg-42a76e26
94+
sg_rds=sg-a27f36c6
95+
sg_redis=sg-81d01ee5
96+
sg_services=sg-950172f1
97+
sg_userland=sg-5a28663e
98+
sg_web=sg-58da143c
99+

‎ansible/gamma-hosts/variables‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -70,3 +70,39 @@ rabbit_username=o2mdLh9N9Ke2GzhoK8xsruYPhIQFN7iEL44dQJoq7OM
7070
registry_host=10.4.4.82
7171
swarm_token=d363b783f03a845a2c82b081bfe8443e
7272
user_content_domain=runnable.ninja
73+
74+
[ec2:vars]
75+
env=gamma
76+
aws_custid=437258487404
77+
vpc_id=vpc-c53464a0
78+
security_groups:
79+
- sg_api
80+
- sg_bastion
81+
- default
82+
- sg_dock
83+
- sg_hipache
84+
- sg_mongo
85+
- sg_nat
86+
- sg_navi
87+
- sg_neo4j
88+
- sg_rabbit
89+
- sg_rds
90+
- sg_redis
91+
- sg_services
92+
- sg_userland
93+
- sg_web
94+
sg_api=sg-3b0c7b5f
95+
sg_bastion=sg-91eb81f5
96+
sg_default=sg-08412b6c
97+
sg_dock=sg-577a0d33
98+
sg_hipache=sg-e70c7883
99+
sg_mongo=sg-977a0df3
100+
sg_nat=sg-b595ffd1
101+
sg_navi=sg-45633421
102+
sg_neo4j=sg-ff60179b
103+
sg_rabbit=sg-44b7cb201
104+
sg_rds=sg-081e596c
105+
sg_redis=sg-477b0c23
106+
sg_services=sg-8c6710e8
107+
sg_userland=sg-12ce9876
108+
sg_web=sg-fe8bf49a

‎ansible/roles/ec2/templates/sg_api.yml‎

Lines changed: 112 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,112 @@
1+
---
2+
SecurityGroups:
3+
-
4+
IpPermissionsEgress:
5+
-
6+
IpProtocol: "-1"
7+
IpRanges:
8+
-
9+
CidrIp: "0.0.0.0/0"
10+
UserIdGroupPairs: []
11+
PrefixListIds: []
12+
Description: "{{ env }} API Security Policy"
13+
Tags:
14+
-
15+
Value: "{{ env }}-api"
16+
Key: "Name"
17+
-
18+
Value: "api"
19+
Key: "Service"
20+
-
21+
Value: "{{ env }}"
22+
Key: "Environment"
23+
IpPermissions:
24+
-
25+
PrefixListIds: []
26+
FromPort: 8400
27+
IpRanges: []
28+
ToPort: 8400
29+
IpProtocol: "tcp"
30+
UserIdGroupPairs:
31+
-
32+
UserId: "{{ aws_custid }}"
33+
GroupId: "{{ sg_web }}"
34+
-
35+
UserId: "{{ aws_custid }}"
36+
GroupId: "{{ sg_services }}"
37+
-
38+
UserId: "{{ aws_custid }}"
39+
GroupId: "{{ sg_dock }}"
40+
-
41+
PrefixListIds: []
42+
FromPort: 32768
43+
IpRanges: []
44+
ToPort: 65535
45+
IpProtocol: "tcp"
46+
UserIdGroupPairs:
47+
-
48+
UserId: "{{ aws_custid }}"
49+
GroupId: "{{ sg_hipache }}"
50+
-
51+
PrefixListIds: []
52+
FromPort: 22
53+
IpRanges: []
54+
ToPort: 22
55+
IpProtocol: "tcp"
56+
UserIdGroupPairs:
57+
-
58+
UserId: "{{ aws_custid }}"
59+
GroupId: "{{ sg_bastion }}"
60+
-
61+
PrefixListIds: []
62+
FromPort: 8301
63+
IpRanges: []
64+
ToPort: 8302
65+
IpProtocol: "udp"
66+
UserIdGroupPairs:
67+
-
68+
UserId: "{{ aws_custid }}"
69+
GroupId: "{{ sg_web }}"
70+
-
71+
UserId: "{{ aws_custid }}"
72+
GroupId: "{{ sg_services }}"
73+
-
74+
UserId: "{{ aws_custid }}"
75+
GroupId: "{{ sg_dock }}"
76+
-
77+
PrefixListIds: []
78+
FromPort: 8500
79+
IpRanges: []
80+
ToPort: 8500
81+
IpProtocol: "tcp"
82+
UserIdGroupPairs:
83+
-
84+
UserId: "{{ aws_custid }}"
85+
GroupId: "{{ sg_web }}"
86+
-
87+
UserId: "{{ aws_custid }}"
88+
GroupId: "{{ sg_services }}"
89+
-
90+
UserId: "{{ aws_custid }}"
91+
GroupId: "{{ sg_dock }}"
92+
-
93+
PrefixListIds: []
94+
FromPort: 8300
95+
IpRanges: []
96+
ToPort: 8302
97+
IpProtocol: "tcp"
98+
UserIdGroupPairs:
99+
-
100+
UserId: "{{ aws_custid }}"
101+
GroupId: "{{ sg_web }}"
102+
-
103+
UserId: "{{ aws_custid }}"
104+
GroupId: "{{ sg_services }}"
105+
-
106+
UserId: "{{ aws_custid }}"
107+
GroupId: "{{ sg_dock }}"
108+
GroupName: "{{ env }}-api"
109+
VpcId: "{{ vpc_id }}"
110+
OwnerId: "{{ aws_custid }}"
111+
GroupId: "{{ sg_api }}"
112+

‎ansible/roles/ec2/templates/sg_bastion.yml‎

Lines changed: 37 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,37 @@
1+
---
2+
SecurityGroups:
3+
-
4+
IpPermissionsEgress:
5+
-
6+
IpProtocol: "-1"
7+
IpRanges:
8+
-
9+
CidrIp: "0.0.0.0/0"
10+
UserIdGroupPairs: []
11+
PrefixListIds: []
12+
Description: "{{ env }} Bastion Security Policy"
13+
Tags:
14+
-
15+
Value: "{{ env }}-bastion"
16+
Key: "Name"
17+
-
18+
Value: "bastion"
19+
Key: "Service"
20+
-
21+
Value: "{{ env }}"
22+
Key: "Environment"
23+
IpPermissions:
24+
-
25+
PrefixListIds: []
26+
FromPort: 22
27+
IpRanges:
28+
-
29+
CidrIp: "0.0.0.0/0"
30+
ToPort: 22
31+
IpProtocol: "tcp"
32+
UserIdGroupPairs: []
33+
GroupName: "{{ env }}-bastion"
34+
VpcId: "{{ vpc_id }}"
35+
OwnerId: "{{ aws_custid }}"
36+
GroupId: "{{ sg_bastion }}"
37+

‎ansible/roles/ec2/templates/sg_default.yml‎

Lines changed: 35 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,35 @@
1+
---
2+
SecurityGroups:
3+
-
4+
IpPermissionsEgress:
5+
-
6+
IpProtocol: "-1"
7+
IpRanges:
8+
-
9+
CidrIp: "0.0.0.0/0"
10+
UserIdGroupPairs: []
11+
PrefixListIds: []
12+
Description: "{{ env }} Default Security Policy"
13+
Tags:
14+
-
15+
Value: "{{ env }}-default"
16+
Key: "Name"
17+
-
18+
Value: "default"
19+
Key: "Service"
20+
-
21+
Value: "{{ ENV }}"
22+
Key: "Environment"
23+
IpPermissions:
24+
-
25+
IpProtocol: "-1"
26+
UserIdGroupPairs:
27+
-
28+
UserId: "{{ aws_custid }}"
29+
GroupId: "{{ sg_default }}"
30+
PrefixListIds: []
31+
GroupName: "default"
32+
VpcId: "{{ vpc_id }}"
33+
OwnerId: "{{ aws_custid }}"
34+
GroupId: "{{ sg_default }}"
35+

0 commit comments

Comments
 (0)