123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136 |
- {% import 'variables.include' as var %}
- # User Settings
- # -------------
- # These MUST be configured
- variable "AWS-Key-Pair-Name" {
- description = "Name of the keypair in AWS"
- type = string
- default = "{{ var.AWS_Key_Pair_Name }}"
- }
- variable "Private-Key-File" {
- description = "The name of the file containing your private key"
- type = string
- default = "{{ var.Private_Key_File }}"
- }
- variable "Domain-Name" {
- description = "Your domain name (hosted in Route53)"
- type = string
- default = "{{ var.Domain_Name }}"
- }
- variable "Domain-Zone-ID" {
- description = "The Zone ID of the Domain-Name in Route53"
- type = string
- default = "{{ var.Domain_Zone_ID }}"
- }
- variable "Trusted-CIDR" {
- description = "Trusted source addresses in CIDR notation."
- type = list
- default = {{ var.Trusted_CIDR }}
- }
- # Common Settings
- # ---------------
- # You may wish to customize these, but defaults
- # will usually work.
- variable "region" {
- description = "Which AWS region do you wish to deploy to?"
- type = string
- default = "{{ var.AWS_Region }}"
- }
- variable "VPC-Subnet" {
- description = "The full subnet for your VPC (to be split into 2 subnets)"
- type = string
- default = "10.66.0.0/16"
- }
- variable "Honeypot-Subnet" {
- description = "The CIDR for the Honeypot subnet. Must be a subnet of VPC-Subnet"
- type = string
- default = "10.66.0.0/24"
- }
- variable "Honeypot-IP-Secured" {
- description = "The private IP for the secured interface. Note that this must be greater than that of the secured interface."
- type = string
- default = "10.66.0.20"
- }
- variable "Honeypot-IP-Unsecured" {
- description = "The private IP for the unsecured interace."
- type = string
- default = "10.66.0.10"
- }
- variable "Splunk-Subnet" {
- description = "The CIDR for the Splunk subnet. Must be a subnet of VPC-Subnet"
- type = string
- default = "10.66.1.0/24"
- }
- variable "Splunk-IP" {
- description = "The IP for the Splunk instance."
- type = string
- default = "10.66.1.10"
- }
- # Performance Settings
- # --------------------
- # Defaults are probably fine, but if you want to change
- # your performance, here's where you can tune.
- variable "Honeypot-Instance-Type" {
- description = "What size instances do you want to deploy?"
- type = string
- #default = "t2.micro"
- default = "t3.2xlarge"
- }
- variable "Splunk-Instance-Type" {
- description = "What size instances do you want to deploy?"
- type = string
- default = "t3.2xlarge"
- #default = "t2.micro"
- }
- variable "EBS-Optimized" {
- description = "Should instances be deployed as EBS optimized?"
- type = string
- #default = false
- default = true
- }
- variable "Honeypot-Volume-Size" {
- description = "How much swap do you need?"
- type = string
- default = 10
- }
- variable "Splunk-Volume-Size" {
- description = "How much swap do you need?"
- type = string
- default = 10
- }
- variable "Swap-Volume-Size" {
- description = "How much swap do you need?"
- type = string
- default = 2
- }
- variable "Swap-Volume-Type" {
- description = "Type of storage for the swap volume."
- type = string
- default = "gp2"
- }
- variable "Default-Volume-Type" {
- description = "Type of storage for the default volumes."
- type = string
- default = "gp2"
- }
|