Updates to OpenVPN

Adds a NAT gateway to vpn-access so that LDAP works.
Includes instructions for manual restore of openvpn.

test/aws-us-gov/mdr-test-c2/010-vpc-access/terragrunt.hcl

@@ -13,7 +13,7 @@ locals {
 # working directory, into a temporary folder, and execute your Terraform commands in that folder.
 terraform {
   # Double slash is intentional and required to show root of modules
-  source = "git@github.mdr.defpoint.com:mdr-engineering/xdr-terraform-modules.git//base/standard_vpc?ref=v0.9.4"
+  source = "git@github.mdr.defpoint.com:mdr-engineering/xdr-terraform-modules.git//base/standard_vpc?ref=v0.9.5"
 }
 
 dependency "transit_gateway" {
@@ -38,4 +38,5 @@ inputs = {
   tags = {
     Terraform = "aws/${basename(get_parent_terragrunt_dir())}/${path_relative_to_include()}/"
   }
+  enable_nat_gateway = true # vpc-access needs internet access for LDAP authentication
 }

test/aws-us-gov/mdr-test-c2/090-instance-openvpn/README.md

@@ -0,0 +1,10 @@
+Following installation:
+
+* Run `sudo /usr/local/bin/openvpn_restore.sh`
+* Run `sudo passwd openvpn` and set the password for the admin user
+* Log into the web ui:
+  * Test: https://openvpn.xdrtest.accenturefederalcyber.com/admin
+  * Prod: https://openvpn.xdr.accenturefederalcyber.com/admin
+* Set:
+  * Configuration/Network Settings: Update server name
+  * Configuration->DNS Resolution Zones: set to `xdrtest.accenturefederalcyber.com` (or `xdr.accenturefederalcyber.com` in prod)

test/aws-us-gov/mdr-test-c2/090-instance-openvpn/terragrunt.hcl

@@ -38,5 +38,6 @@ inputs = {
   instance_type = local.account_vars.locals.openvpn_instance_type
   vpc_id = dependency.vpc-access.outputs.vpc_id
   azs = dependency.vpc-access.outputs.azs
-  subnets = dependency.vpc-access.outputs.public_subnets
+  subnets = dependency.vpc-access.outputs.private_subnets
+  public_subnets = dependency.vpc-access.outputs.public_subnets
 }