mirror of
https://github.com/hwdsl2/setup-ipsec-vpn.git
synced 2024-06-30 17:45:43 +02:00
324 lines
9.5 KiB
JSON
324 lines
9.5 KiB
JSON
{
|
|
"$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
|
|
"contentVersion": "1.0.0.0",
|
|
"parameters": {
|
|
"username": {
|
|
"type": "string",
|
|
"minLength": 1,
|
|
"metadata": {
|
|
"description": "User name for SSH and VPN"
|
|
}
|
|
},
|
|
"password": {
|
|
"type": "securestring",
|
|
"metadata": {
|
|
"description": "User password for SSH and VPN"
|
|
}
|
|
},
|
|
"preSharedKey": {
|
|
"type": "securestring",
|
|
"metadata": {
|
|
"description": "Pre-Shared Key for VPN"
|
|
}
|
|
},
|
|
"image": {
|
|
"type": "string",
|
|
"allowedValues": [
|
|
"ubuntu",
|
|
"debian"
|
|
],
|
|
"defaultValue": "debian",
|
|
"metadata": {
|
|
"description": "OS to use. Debian or Ubuntu"
|
|
}
|
|
},
|
|
"VMSize": {
|
|
"type": "string",
|
|
"defaultValue": "Standard_A0",
|
|
"allowedValues": [
|
|
"Standard_A0",
|
|
"Standard_A1",
|
|
"Standard_A2",
|
|
"Standard_A3",
|
|
"Standard_A4",
|
|
"Standard_A5",
|
|
"Standard_A6",
|
|
"Standard_A7",
|
|
"Standard_A8",
|
|
"Standard_A9",
|
|
"Standard_A10",
|
|
"Standard_A11",
|
|
"Standard_D1",
|
|
"Standard_D2",
|
|
"Standard_D3",
|
|
"Standard_D4",
|
|
"Standard_D11",
|
|
"Standard_D12",
|
|
"Standard_D13",
|
|
"Standard_D14",
|
|
"Standard_D1_v2",
|
|
"Standard_D2_v2",
|
|
"Standard_D3_v2",
|
|
"Standard_D4_v2",
|
|
"Standard_D5_v2",
|
|
"Standard_D11_v2",
|
|
"Standard_D12_v2",
|
|
"Standard_D13_v2",
|
|
"Standard_D14_v2",
|
|
"Standard_G1",
|
|
"Standard_G2",
|
|
"Standard_G3",
|
|
"Standard_G4",
|
|
"Standard_G5",
|
|
"Standard_DS1",
|
|
"Standard_DS2",
|
|
"Standard_DS3",
|
|
"Standard_DS4",
|
|
"Standard_DS11",
|
|
"Standard_DS12",
|
|
"Standard_DS13",
|
|
"Standard_DS14",
|
|
"Standard_GS1",
|
|
"Standard_GS2",
|
|
"Standard_GS3",
|
|
"Standard_GS4",
|
|
"Standard_GS5"
|
|
],
|
|
"metadata": {
|
|
"description": "The size of the Virtual Machine."
|
|
}
|
|
}
|
|
},
|
|
"variables": {
|
|
"location": "[resourceGroup().location]",
|
|
"vmName": "vpnserver",
|
|
"virtualNetworkName": "vpnVnet",
|
|
"addressPrefix": "10.0.0.0/16",
|
|
"subnetName": "VPNSubnet",
|
|
"subnetPrefix": "10.0.1.0/24",
|
|
"apiVersion": "2015-06-15",
|
|
"storageName": "[concat(uniqueString(resourceGroup().id), 'vpnsa')]",
|
|
"vhdStorageType": "Standard_LRS",
|
|
"vnetId": "[resourceId('Microsoft.Network/virtualNetworks', variables('virtualNetworkName'))]",
|
|
"SubnetRef": "[concat(variables('vnetId'), '/subnets/', variables('subnetName'))]",
|
|
"ubuntu": {
|
|
"publisher": "Canonical",
|
|
"offer": "UbuntuServer",
|
|
"sku": "16.04.0-LTS",
|
|
"version": "latest"
|
|
},
|
|
"debian": {
|
|
"publisher": "credativ",
|
|
"offer": "Debian",
|
|
"sku": "8",
|
|
"version": "latest"
|
|
},
|
|
"installScriptURL": "https://raw.githubusercontent.com/hwdsl2/setup-ipsec-vpn/master/azure/install.sh",
|
|
"installCommand": "[concat('sh install.sh ', parameters('preSharedKey'), ' ', parameters('username'), ' ', parameters('password'))]"
|
|
},
|
|
"resources": [
|
|
{
|
|
"type": "Microsoft.Storage/storageAccounts",
|
|
"name": "[variables('storageName')]",
|
|
"apiVersion": "2016-01-01",
|
|
"location": "[variables('location')]",
|
|
"tags": {
|
|
"displayName": "StorageAccount"
|
|
},
|
|
"properties": {},
|
|
"sku": {
|
|
"name": "[variables('vhdStorageType')]"
|
|
},
|
|
"kind": "Storage"
|
|
},
|
|
{
|
|
"apiVersion": "[variables('apiVersion')]",
|
|
"type": "Microsoft.Network/virtualNetworks",
|
|
"name": "[variables('virtualNetworkName')]",
|
|
"location": "[variables('location')]",
|
|
"tags": {
|
|
"displayName": "VirtualNetwork"
|
|
},
|
|
"properties": {
|
|
"addressSpace": {
|
|
"addressPrefixes": [
|
|
"[variables('addressPrefix')]"
|
|
]
|
|
},
|
|
"subnets": [
|
|
{
|
|
"name": "[variables('subnetName')]",
|
|
"properties": {
|
|
"addressPrefix": "[variables('subnetPrefix')]"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"apiVersion": "[variables('apiVersion')]",
|
|
"type": "Microsoft.Network/networkInterfaces",
|
|
"name": "[concat(variables('vmName'), 'nic')]",
|
|
"location": "[resourceGroup().location]",
|
|
"tags": {
|
|
"displayName": "NetworkInterface"
|
|
},
|
|
"dependsOn": [
|
|
"[concat('Microsoft.Network/virtualNetworks/', concat(variables('virtualNetworkName')))]",
|
|
"[concat('Microsoft.Network/publicIPAddresses/', concat(variables('vmName'), 'pip'))]",
|
|
"[concat('Microsoft.Network/networkSecurityGroups/', concat(variables('vmName'), 'nsg'))]"
|
|
],
|
|
"properties": {
|
|
"ipConfigurations": [
|
|
{
|
|
"name": "ipconfig1",
|
|
"properties": {
|
|
"privateIPAllocationMethod": "Dynamic",
|
|
"publicIPAddress": {
|
|
"id": "[resourceId('Microsoft.Network/publicIPAddresses', concat(variables('vmName'), 'pip'))]"
|
|
},
|
|
"subnet": {
|
|
"id": "[variables('subnetRef')]"
|
|
}
|
|
}
|
|
}
|
|
],
|
|
"networkSecurityGroup": {
|
|
"id": "[resourceId('Microsoft.Network/networkSecurityGroups', concat(variables('vmName'), 'nsg'))]"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"type": "Microsoft.Compute/virtualMachines",
|
|
"name": "[variables('vmName')]",
|
|
"apiVersion": "2016-03-30",
|
|
"location": "[resourceGroup().location]",
|
|
"tags": {
|
|
"displayName": "VirtualMachine"
|
|
},
|
|
"dependsOn": [
|
|
"[concat('Microsoft.Network/networkInterfaces/', concat(variables('vmName'), 'nic'))]"
|
|
],
|
|
"properties": {
|
|
"hardwareProfile": {
|
|
"vmSize": "[parameters('vmSize')]"
|
|
},
|
|
"osProfile": {
|
|
"computerName": "[variables('vmName')]",
|
|
"adminUsername": "[parameters('username')]",
|
|
"adminPassword": "[parameters('password')]"
|
|
},
|
|
"storageProfile": {
|
|
"imageReference": "[variables(parameters('image'))]",
|
|
"osDisk": {
|
|
"name": "osdisk",
|
|
"vhd": {
|
|
"uri": "[concat(reference(resourceId('Microsoft.Storage/storageAccounts/', variables('storageName'))).primaryEndpoints.blob, 'vmachines/', variables('vmName'), '.vhd')]"
|
|
},
|
|
"caching": "ReadWrite",
|
|
"createOption": "FromImage"
|
|
}
|
|
},
|
|
"networkProfile": {
|
|
"networkInterfaces": [
|
|
{
|
|
"id": "[resourceId('Microsoft.Network/networkInterfaces', concat(variables('vmName'), 'nic'))]"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"type": "Microsoft.Compute/virtualMachines/extensions",
|
|
"name": "[concat(variables('vmName'),'/installcustomscript')]",
|
|
"apiVersion": "[variables('apiVersion')]",
|
|
"location": "[resourceGroup().location]",
|
|
"tags": {
|
|
"displayName": "VirtualMachineCustomScriptExtension"
|
|
},
|
|
"dependsOn": [
|
|
"[concat('Microsoft.Compute/virtualMachines/', variables('vmName'))]"
|
|
],
|
|
"properties": {
|
|
"publisher": "Microsoft.OSTCExtensions",
|
|
"type": "CustomScriptForLinux",
|
|
"typeHandlerVersion": "1.3",
|
|
"settings": {
|
|
"fileUris": [ "[variables('installScriptURL')]" ],
|
|
"commandToExecute": "[variables('installCommand')]"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"type": "Microsoft.Network/networkSecurityGroups",
|
|
"name": "[concat(variables('vmName'), 'nsg')]",
|
|
"tags": {
|
|
"displayName": "NetworkSecurityGroup"
|
|
},
|
|
"apiVersion": "[variables('apiVersion')]",
|
|
"location": "[resourceGroup().location]",
|
|
"properties": {
|
|
"securityRules": [
|
|
{
|
|
"name": "default-ssh",
|
|
"properties": {
|
|
"protocol": "Tcp",
|
|
"sourcePortRange": "*",
|
|
"destinationPortRange": "22",
|
|
"sourceAddressPrefix": "*",
|
|
"destinationAddressPrefix": "*",
|
|
"access": "Allow",
|
|
"priority": 1000,
|
|
"direction": "Inbound"
|
|
}
|
|
},
|
|
{
|
|
"name": "default-udp-500",
|
|
"properties": {
|
|
"protocol": "Udp",
|
|
"sourcePortRange": "*",
|
|
"destinationPortRange": "500",
|
|
"sourceAddressPrefix": "*",
|
|
"destinationAddressPrefix": "*",
|
|
"access": "Allow",
|
|
"priority": 2000,
|
|
"direction": "Inbound"
|
|
}
|
|
},
|
|
{
|
|
"name": "default-udp-4500",
|
|
"properties": {
|
|
"protocol": "Udp",
|
|
"sourcePortRange": "*",
|
|
"destinationPortRange": "4500",
|
|
"sourceAddressPrefix": "*",
|
|
"destinationAddressPrefix": "*",
|
|
"access": "Allow",
|
|
"priority": 2001,
|
|
"direction": "Inbound"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"apiVersion": "[variables('apiVersion')]",
|
|
"type": "Microsoft.Network/publicIPAddresses",
|
|
"name": "[concat(variables('vmName'), 'pip')]",
|
|
"location": "[resourceGroup().location]",
|
|
"tags": {
|
|
"displayName": "PublicIPAddress"
|
|
},
|
|
"properties": {
|
|
"publicIPAllocationMethod": "Static"
|
|
}
|
|
}
|
|
],
|
|
"outputs": {
|
|
"Public IP": {
|
|
"type": "string",
|
|
"value": "[reference(concat(variables('vmName'), 'pip')).ipAddress]"
|
|
}
|
|
}
|
|
}
|