williamkray / cloudlab Goto Github PK

want to include a cloudformation that deploys a configured Wireguard instance to replace the bastion host config. would need to:

• install wireguard
• have two ENIs? (one public, one private)
• iptables config to send traffic from wireguard interface through to the private interface for internal connections in the vpc
• security group
• generate a client config file that can be used by client connections

future plans to create a cloudformation template that launches a fully configured jenkins installation. bonus points if it installs the DSL and pipeline plugins, and optionally points to a repository that defines a few basic jobs.

simple security group creation should support being passed either a cidr block OR an SG's ID to allow ingress traffic from.

need to have another cloudformation template that creates three SGs for the three networking tiers:

• public - allows ingress traffic from private
• private - allows ingress traffic from pub and pro
• protected - allows ingress traffic from pri