ismail0352

FROM ubuntu as ubuntu

RUN apt-get update
RUN apt-get install -y dpkg-dev wget gnupg2 curl

ARG ubuntu_packages="wget htop default-jre-headless apt-transport-https nvidia-container-toolkit cuda-drivers libopengl0 linux-image-extra-virtual omnisci"

WORKDIR /opt/packages/deb

# Nvidia-Docker

ismail0352

#!/bin/bash

DISTRO_ID=$(awk -F= '/^ID=/{print $2}' /etc/os-release | sed -e 's/^"//' -e 's/"$//')

# Install Salt Minion
if [ $DISTRO_ID == centos ]; then
    echo "Do CENTOS stuff here"

elif [ $DISTRO_ID == ubuntu ]; then
    echo "Do UBUNTU stuff here"

ismail0352

provider "aws" {
  region                  = "us-west-2"
  shared_credentials_file = "~/.aws/credentials"
  profile                 = "default"
}

resource "aws_s3_bucket" "terraform_state" {
  bucket = "terraform-backend-state"
  versioning {
    enabled = true

ismail0352

# have this created before hand on AWS
data "aws_eip" "Production-VPC-EIP" {
  tags = {
    Name = "Production-VPC-EIP"
  }
}

module "vpc" {
  # source = "../modules/vpc"
  source = "github.com/terraform-aws-modules/terraform-aws-vpc"

ismail0352

module "prod-openvpn-sg" {
  # source                    = "../modules/security-group"
  source                    = "github.com/terraform-aws-modules/terraform-aws-security-group"
  name                      = "${var.vpn_name}-sg"
  description               = "Security Group for openvpn server Prod"
  vpc_id                    = var.vpc_id
  ingress_cidr_blocks       = ["0.0.0.0/0"] # Actual IP range to support
  ingress_ipv6_cidr_blocks  = ["::/0"]
  ingress_rules             = ["openvpn-udp", "openvpn-tcp", "openvpn-https-tcp", "ssh-tcp"]
  egress_rules              = ["all-all"]

ismail0352

//AWS access credential validation
provider "aws" {
  region                  = "us-west-2"
  shared_credentials_file = "~/.aws/credentials"
  profile                 = "default"
}

//Creates Prod VPC
module "prod_vpc" {
  source                  = "./prod_vpc"

ismail0352

Create Root CA (Done once)

Create Root Key

Attention: this is the key used to sign the certificate requests, anyone holding this can sign certificates on your behalf. So keep it in a safe place!

openssl genrsa -des3 -out rootCA.key 4096