mirror of
https://github.com/telekom-security/tpotce.git
synced 2025-04-29 03:38:51 +00:00
a73f34490d
- Add variables to cloud-init.yaml - Allow to set Linux OS password via cloud-init - Pass the tpot.conf file as inline content to allow variables - Remove obsolete tpot.conf file in terraform/ directory
66 lines
1.5 KiB
HCL
66 lines
1.5 KiB
HCL
provider "aws" {
|
|
region = var.ec2_region
|
|
}
|
|
|
|
resource "aws_security_group" "tpot" {
|
|
name = "T-Pot"
|
|
description = "T-Pot Honeypot"
|
|
vpc_id = var.ec2_vpc_id
|
|
ingress {
|
|
from_port = 0
|
|
to_port = 64000
|
|
protocol = "tcp"
|
|
cidr_blocks = ["0.0.0.0/0"]
|
|
}
|
|
ingress {
|
|
from_port = 0
|
|
to_port = 64000
|
|
protocol = "udp"
|
|
cidr_blocks = ["0.0.0.0/0"]
|
|
}
|
|
ingress {
|
|
from_port = 64294
|
|
to_port = 64294
|
|
protocol = "tcp"
|
|
cidr_blocks = var.admin_ip
|
|
}
|
|
ingress {
|
|
from_port = 64295
|
|
to_port = 64295
|
|
protocol = "tcp"
|
|
cidr_blocks = var.admin_ip
|
|
}
|
|
ingress {
|
|
from_port = 64297
|
|
to_port = 64297
|
|
protocol = "tcp"
|
|
cidr_blocks = var.admin_ip
|
|
}
|
|
egress {
|
|
from_port = 0
|
|
to_port = 0
|
|
protocol = "-1"
|
|
cidr_blocks = ["0.0.0.0/0"]
|
|
}
|
|
tags = {
|
|
Name = "T-Pot"
|
|
}
|
|
}
|
|
|
|
resource "aws_instance" "tpot" {
|
|
ami = var.ec2_ami[var.ec2_region]
|
|
instance_type = var.ec2_instance_type
|
|
key_name = var.ec2_ssh_key_name
|
|
subnet_id = var.ec2_subnet_id
|
|
tags = {
|
|
Name = "T-Pot Honeypot"
|
|
}
|
|
root_block_device {
|
|
volume_type = "gp2"
|
|
volume_size = 128
|
|
delete_on_termination = true
|
|
}
|
|
user_data = templatefile("../cloud-init.yaml", {timezone = var.timezone, password = var.linux_password, tpot_flavor = var.tpot_flavor, web_user = var.web_user, web_password = var.web_password})
|
|
vpc_security_group_ids = [aws_security_group.tpot.id]
|
|
associate_public_ip_address = true
|
|
}
|