mirror of
https://github.com/trailofbits/algo.git
synced 2026-09-20 08:37:50 +02:00
Jack IvanovandDan Guido
e8947f318b
* Refactoring, booleans declaration and update users fix * Make server_name more FQDN compatible * Rename variables * Define the default value for store_cakey * Skip a prompt about the SSH user if deploying to localhost * Disable reboot for non-cloud deployments * Enable EC2 volume encryption by default * Add default server value (localhost) for the local installation Delete empty files * Add default region to aws_region_facts * Update docs * EC2 credentials fix * Warnings fix * Update deploy-from-ansible.md * Fix a typo * Remove lightsail from the docs * Disable EC2 encryption by default * rename droplet to server * Disable dependencies * Disable tls_cipher_suite * Convert wifi-exclude to a string. Update-users fix * SSH access congrats fix * 16.04 > 18.04 * Dont ask for the credentials if specified in the environment vars * GCE server name fix
43 lines
1.6 KiB
YAML
43 lines
1.6 KiB
YAML
- block:
|
|
- name: Include prompts
|
|
import_tasks: prompts.yml
|
|
|
|
- set_fact:
|
|
algo_region: >-
|
|
{% if region is defined %}{{ region }}
|
|
{%- elif _algo_region.user_input is defined and _algo_region.user_input != "" %}{{ aws_regions[_algo_region.user_input | int -1 ]['region_name'] }}
|
|
{%- else %}{{ aws_regions[default_region | int - 1]['region_name'] }}{% endif %}
|
|
stack_name: "{{ algo_server_name | replace('.', '-') }}"
|
|
|
|
- name: Locate official AMI for region
|
|
ec2_ami_facts:
|
|
aws_access_key: "{{ access_key }}"
|
|
aws_secret_key: "{{ secret_key }}"
|
|
owners: "{{ cloud_providers.ec2.image.owner }}"
|
|
region: "{{ algo_region }}"
|
|
filters:
|
|
name: "ubuntu/images/hvm-ssd/{{ cloud_providers.ec2.image.name }}-amd64-server-*"
|
|
register: ami_search
|
|
|
|
- import_tasks: encrypt_image.yml
|
|
when: encrypted
|
|
|
|
- name: Set the ami id as a fact
|
|
set_fact:
|
|
ami_image: >-
|
|
{% if ami_search_encrypted.image_id is defined %}{{ ami_search_encrypted.image_id }}
|
|
{%- elif search_crypt.images is defined and search_crypt.images|length >= 1 %}{{ (search_crypt.images | sort(attribute='creation_date') | last)['image_id'] }}
|
|
{%- else %}{{ (ami_search.images | sort(attribute='creation_date') | last)['image_id'] }}{% endif %}
|
|
|
|
- name: Deploy the stack
|
|
import_tasks: cloudformation.yml
|
|
|
|
- set_fact:
|
|
cloud_instance_ip: "{{ stack.stack_outputs.ElasticIP }}"
|
|
ansible_ssh_user: ubuntu
|
|
rescue:
|
|
- debug: var=fail_hint
|
|
tags: always
|
|
- fail:
|
|
tags: always
|