aboutsummaryrefslogtreecommitdiff
path: root/old/sliver-c2/tasks/ssh_nginx_setup.yaml
diff options
context:
space:
mode:
authorheqnx <root@heqnx.com>2025-05-25 11:50:46 +0300
committerheqnx <root@heqnx.com>2025-05-25 11:50:46 +0300
commit7c8ed923df3c02338dfbf826fd6fd9a23dac502e (patch)
tree929ee32e5a6f32e952bb8fcad33f704a371af9ff /old/sliver-c2/tasks/ssh_nginx_setup.yaml
parente905a6a60ceb43ef2bfa8f0f61c23630955caf1f (diff)
downloadansible-playbooks-7c8ed923df3c02338dfbf826fd6fd9a23dac502e.tar.gz
ansible-playbooks-7c8ed923df3c02338dfbf826fd6fd9a23dac502e.zip
moved unorganized playbooks into old folder
Diffstat (limited to 'old/sliver-c2/tasks/ssh_nginx_setup.yaml')
-rw-r--r--old/sliver-c2/tasks/ssh_nginx_setup.yaml76
1 files changed, 76 insertions, 0 deletions
diff --git a/old/sliver-c2/tasks/ssh_nginx_setup.yaml b/old/sliver-c2/tasks/ssh_nginx_setup.yaml
new file mode 100644
index 0000000..beb0910
--- /dev/null
+++ b/old/sliver-c2/tasks/ssh_nginx_setup.yaml
@@ -0,0 +1,76 @@
+- block:
+ - name: install required packages
+ apt:
+ name:
+ - openssl
+ - nginx
+ - sslh
+ - ufw
+ state: present
+ update_cache: true
+
+ - name: deploy index.html
+ template:
+ src: index.html.j2
+ dest: /var/www/html/index.html
+ owner: www-data
+ group: www-data
+ mode: '0644'
+
+ - name: ensure /var/www/html directory permissions
+ file:
+ path: /var/www/html
+ state: directory
+ owner: www-data
+ group: www-data
+ mode: '0755'
+
+ - name: generate self-signed ssl certificate
+ command: >
+ openssl req -x509 -nodes -days 365 -newkey rsa:2048
+ -keyout /etc/ssl/private/nginx-selfsigned.key
+ -out /etc/ssl/certs/nginx-selfsigned.crt
+ -subj "/CN=localhost"
+ args:
+ creates: /etc/ssl/certs/nginx-selfsigned.crt
+
+ - name: deploy nginx.conf
+ template:
+ src: nginx.conf.j2
+ dest: /etc/nginx/nginx.conf
+ owner: root
+ group: root
+ mode: '0644'
+ notify: restart nginx
+
+ - name: deploy sslh config file
+ template:
+ src: sslh.j2
+ dest: /etc/default/sslh
+ owner: root
+ group: root
+ mode: '0644'
+ notify: restart sslh
+
+ - name: allow ssh port and enable ufw
+ ufw:
+ rule: allow
+ port: "{{ internal_sshd_port }}"
+ proto: tcp
+ notify:
+ - enable ufw
+ - restart ufw
+
+ - name: allow http port and enable ufw
+ ufw:
+ rule: allow
+ port: "{{ public_sslh_port }}"
+ proto: tcp
+ notify:
+ - enable ufw
+ - restart ufw
+
+ when:
+ - public_sslh_port is defined
+ - internal_nginx_port is defined
+ - internal_sshd_port is defined