n0mad1k
7484a0e034
- Dual-mode operation: standalone + c2itall integrated (env var detection)
- SSH keys moved to ~/.ssh/c2deploy_ph-{id} with per-deployment known_hosts
- Ansible output streaming with filtered console + full log capture
- Deployment management menu: discover, SSH, teardown existing deployments
- Cert setup script (setup-cert.sh) deployed to servers for post-DNS LE certs
- Matrix hardening: unique secrets, SSRF protection, rate limits, nginx security headers
- Base hardening: fail2ban systemd backend (Debian 12), SSH limits, nginx jails
- Add-matrix-user helper script deployed to all Matrix servers
- .env support for standalone credential storage
- Config key rename: deploy_id → deployment_id (with backward compat)
- Provider cleanup playbooks for teardown
- Test suite with 50 tests
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
50 lines
1.5 KiB
YAML
50 lines
1.5 KiB
YAML
---
|
|
# Tear down a Phantom AWS EC2 instance
|
|
# Matches c2itall cleanup pattern
|
|
|
|
- name: Teardown Phantom EC2 Instance
|
|
hosts: localhost
|
|
connection: local
|
|
gather_facts: false
|
|
|
|
environment:
|
|
AWS_ACCESS_KEY_ID: "{{ aws_access_key }}"
|
|
AWS_SECRET_ACCESS_KEY: "{{ aws_secret_key }}"
|
|
AWS_DEFAULT_REGION: "{{ region | default('us-east-1') }}"
|
|
|
|
tasks:
|
|
- name: Find instance by name tag
|
|
amazon.aws.ec2_instance_info:
|
|
filters:
|
|
"tag:Name": "{{ instance_label }}"
|
|
instance-state-name: ["running", "stopped", "pending"]
|
|
region: "{{ region | default('us-east-1') }}"
|
|
register: ec2_info
|
|
|
|
- name: Terminate instance
|
|
amazon.aws.ec2_instance:
|
|
instance_ids: "{{ ec2_info.instances | map(attribute='instance_id') | list }}"
|
|
state: absent
|
|
region: "{{ region | default('us-east-1') }}"
|
|
when: ec2_info.instances | length > 0
|
|
register: deletion
|
|
ignore_errors: true
|
|
|
|
- name: Delete security group
|
|
amazon.aws.ec2_security_group:
|
|
name: "{{ instance_label }}"
|
|
state: absent
|
|
region: "{{ region | default('us-east-1') }}"
|
|
ignore_errors: true
|
|
|
|
- name: Delete key pair
|
|
amazon.aws.ec2_key:
|
|
name: "{{ instance_label }}"
|
|
state: absent
|
|
region: "{{ region | default('us-east-1') }}"
|
|
ignore_errors: true
|
|
|
|
- name: Report teardown result
|
|
debug:
|
|
msg: "Instance {{ instance_label }}: {{ (ec2_info.instances | length > 0) | ternary('Terminated', 'Not found') }}"
|