guillermo-musumeci

# Unattended Install of Firefox

$SourceURL = "https://download.mozilla.org/?product=firefox-msi-latest-ssl&os=win64&lang=en-US";
$Installer = $env:TEMP + "\firefox.exe"; 
Invoke-WebRequest $SourceURL -OutFile $Installer;
Start-Process -FilePath $Installer -Args "/s" -Verb RunAs -Wait; 
Remove-Item $Installer;

guillermo-musumeci

# Unattended Install of Google Chrome

$Installer = $env:TEMP + "\chrome_installer.exe"; 
Invoke-WebRequest "http://dl.google.com/chrome/install/375.126/chrome_installer.exe" -OutFile $Installer; 
Start-Process -FilePath $Installer -Args "/silent /install" -Verb RunAs -Wait; 
Remove-Item $Installer;

guillermo-musumeci

# Unattended Install of Visual Studio Code

$channel = 'stable'
$platform = 'win32-x64-user' 
$SourceURL = "https://vscode-update.azurewebsites.net/latest/$platform/$channel";
$Installer = $env:TEMP + "\vscode.exe"; 
Invoke-WebRequest $SourceURL -OutFile $Installer;
Start-Process -FilePath $Installer -Args "/verysilent /tasks=addcontextmenufiles,addcontextmenufolders,addtopath" -Wait; 
Remove-Item $Installer;
Stop-Process -Name Explorer

guillermo-musumeci

aws ec2 create-snapshot --volume-id vol-01234567890abcdef --description 'prod database data backup'

guillermo-musumeci

# Configure Time Zone and NTP server

# Variables
$TimeZone = "Romance Standard Time"
$NTPServer = "ntp.kopicloud.local"

# Configure NTP and restart service
Set-TimeZone -Id $TimeZone -PassThru
Push-Location
Set-Location HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\Servers

guillermo-musumeci

##################################
# Azure Resource Group variables #
##################################

variable "resource_group_name" {
  type        = string
  description = "The name of an existing Resource Group"
}

variable "location" {

guillermo-musumeci

data "azurerm_client_config" "current" {}

# Create the Azure Key Vault
resource "azurerm_key_vault" "key-vault" {
  name                = var.name
  location            = var.location
  resource_group_name = var.resource_group_name
  
  enabled_for_deployment          = var.enabled_for_deployment
  enabled_for_disk_encryption     = var.enabled_for_disk_encryption

guillermo-musumeci

output "key-vault-id" {
  description = "Key Vault ID"
  value       = azurerm_key_vault.key-vault.id
}

output "key-vault-url" {
  description = "Key Vault URI"
  value       = azurerm_key_vault.key-vault.vault_uri
}

guillermo-musumeci

#######################
# Key Vault variables #
#######################

variable "kv-full-object-id" {
  type        = string
  description = "The object ID of a user, service principal or security group in the Azure Active Directory tenant for FULL access to the Azure Key Vault"
  default     = ""
}

guillermo-musumeci

module "keyvault" {
  source              = "./modules/keyvault"
  name                = "${var.environment}-keyvault"
  location            = azurerm_resource_group.security-rg.location
  resource_group_name = azurerm_resource_group.security-rg.name
  
  enabled_for_deployment          = var.kv-vm-deployment
  enabled_for_disk_encryption     = var.kv-disk-encryption
  enabled_for_template_deployment = var.kv-template-deployment