n0mad1k
113 lines
3.4 KiB
YAML
113 lines
3.4 KiB
YAML
---
|
|
# Linode Cleanup Playbook
|
|
# Used to tear down Linode infrastructure
|
|
|
|
- name: Clean up Linode infrastructure
|
|
hosts: localhost
|
|
connection: local
|
|
gather_facts: false
|
|
vars_files:
|
|
- vars.yaml
|
|
vars:
|
|
cleanup_redirector: "{{ (redirector_name is defined and redirector_name != '') | ternary(true, false) }}"
|
|
cleanup_c2: "{{ (c2_name is defined and c2_name != '') | ternary(true, false) }}"
|
|
confirm_cleanup: "{{ confirm_cleanup | default(true) }}"
|
|
|
|
tasks:
|
|
- name: Validate required Linode token
|
|
assert:
|
|
that:
|
|
- linode_token is defined and linode_token != ""
|
|
fail_msg: "Linode API token is required. Set linode_token in vars.yaml or via --linode-token."
|
|
|
|
- name: Confirm cleanup if required
|
|
pause:
|
|
prompt: "WARNING: This will permanently delete all infrastructure. Type 'yes' to continue"
|
|
register: confirmation
|
|
when: confirm_cleanup
|
|
|
|
- name: Exit if not confirmed
|
|
meta: end_play
|
|
when: confirm_cleanup and confirmation.user_input != 'yes'
|
|
|
|
- name: Get redirector instance info
|
|
community.general.linode_v4:
|
|
access_token: "{{ linode_token }}"
|
|
command: list
|
|
label: "{{ redirector_name }}"
|
|
register: redirector_info
|
|
failed_when: false
|
|
when: cleanup_redirector
|
|
|
|
- name: Get C2 instance info
|
|
community.general.linode_v4:
|
|
access_token: "{{ linode_token }}"
|
|
command: list
|
|
label: "{{ c2_name }}"
|
|
register: c2_info
|
|
failed_when: false
|
|
when: cleanup_c2
|
|
|
|
- name: Set redirector ID as fact
|
|
set_fact:
|
|
redirector_instance_id: "{{ redirector_info.instances[0].id }}"
|
|
when:
|
|
- cleanup_redirector
|
|
- redirector_info.instances is defined
|
|
- redirector_info.instances | length > 0
|
|
|
|
- name: Set C2 ID as fact
|
|
set_fact:
|
|
c2_instance_id: "{{ c2_info.instances[0].id }}"
|
|
when:
|
|
- cleanup_c2
|
|
- c2_info.instances is defined
|
|
- c2_info.instances | length > 0
|
|
|
|
- name: Delete redirector instance
|
|
community.general.linode_v4:
|
|
access_token: "{{ linode_token }}"
|
|
command: delete
|
|
label: "{{ redirector_name }}"
|
|
state: absent
|
|
when:
|
|
- cleanup_redirector
|
|
- redirector_instance_id is defined
|
|
register: redirector_deletion
|
|
|
|
- name: Delete C2 instance
|
|
community.general.linode_v4:
|
|
access_token: "{{ linode_token }}"
|
|
command: delete
|
|
label: "{{ c2_name }}"
|
|
state: absent
|
|
when:
|
|
- cleanup_c2
|
|
- c2_instance_id is defined
|
|
register: c2_deletion
|
|
|
|
- name: Remove SSH key file if it's not a shared key
|
|
file:
|
|
path: "{{ ssh_key_path | replace('.pub', '') }}"
|
|
state: absent
|
|
when:
|
|
- ssh_key_path is defined
|
|
- ssh_key_path is search('c2deploy_')
|
|
ignore_errors: true
|
|
|
|
- name: Remove SSH public key file if it's not a shared key
|
|
file:
|
|
path: "{{ ssh_key_path }}"
|
|
state: absent
|
|
when:
|
|
- ssh_key_path is defined
|
|
- ssh_key_path is search('c2deploy_')
|
|
ignore_errors: true
|
|
|
|
- name: Cleanup complete message
|
|
debug:
|
|
msg:
|
|
- "Linode infrastructure cleanup complete!"
|
|
- "Resources that were cleaned up:"
|
|
- "{{ cleanup_redirector | ternary('- Redirector instance: ' + redirector_name, '') }}"
|
|
- "{{ cleanup_c2 | ternary('- C2 instance: ' + c2_name, '') }}" |