working through issues

templates/setup-cert.sh.j2

@@ -0,0 +1,22 @@
+#!/bin/bash
+# Let's Encrypt Certificate Setup Script
+# Run this after setting up DNS records pointing to this server
+
+# Replace these with your actual values if needed
+DOMAIN="{{ domain }}"
+SUBDOMAIN="{{ redirector_subdomain | default(cdn) }}"
+EMAIL="admin@${DOMAIN}"
+
+echo "================================================"
+echo "Let's Encrypt Certificate Setup"
+echo "================================================"
+echo
+echo "Before running this script, make sure:"
+echo "1. DNS records are set up correctly"
+echo "   - ${SUBDOMAIN}.${DOMAIN} points to $(curl -s ifconfig.me)"
+echo "2. Port 80 is open to the internet"
+echo
+echo "Run the following command to get your certificate:"
+echo "certbot --nginx -d ${SUBDOMAIN}.${DOMAIN} --non-interactive --agree-tos -m ${EMAIL}"
+echo
+echo "================================================"

templates/shell-handler.service.j2

@@ -19,10 +19,10 @@ NoNewPrivileges=true
 StandardOutput=null
 StandardError=null
 
-# Environment variables
-Environment="C2_HOST={{ c2_ip }}"
-Environment="LISTEN_PORT={{ shell_handler_port }}"
-Environment="HAVOC_PORT={{ havoc_teamserver_port | default(40056) }}"
+# Environment variables (configured via Ansible)
+Environment="C2_HOST={{ c2_ip | default('127.0.0.1') }}"
+Environment="LISTEN_PORT={{ shell_handler_port | default('4444') }}"
+Environment="HAVOC_PORT={{ havoc_teamserver_port | default('40056') }}"
 
 [Install]
-WantedBy=multi-user.target
+WantedBy=multi-user.target

templates/stream.conf.j2

@@ -0,0 +1,20 @@
+# TCP stream configuration for Havoc C2
+stream {
+    # TCP forwarding for Havoc Teamserver
+    server {
+  listen {{ havoc_teamserver_port | default(40056) }};
+  proxy_pass {{ c2_ip }}:{{ havoc_teamserver_port | default(40056) }};
+    }
+    
+    # Additional Havoc ports
+    server {
+  listen {{ havoc_http_port | default(8080) }};
+  proxy_pass {{ c2_ip }}:{{ havoc_http_port | default(8080) }};
+    }
+    
+    # HTTPS for Havoc
+    server {
+  listen {{ havoc_https_port | default(443) }};
+  proxy_pass {{ c2_ip }}:{{ havoc_https_port | default(443) }};
+    }
+}