Bastion is a web application maintains AWS Security Groups.
# clone source
git clone https://github.com/wata-gh/bastion.git
# setup (you need npm to setup)
cd bastion
./script/setup
# run unicorn
RACK_ENV=production ./script/unicornIf you are using capistrano, you can set environment(config/unicorn/production.rb) settings and deploy.
bundle exec cap production deploy:app:
:name: bastion
:aws_config:
:access_key_id: '[Your Access Key]'
:secret_access_key: '[Your Secret Key]'
:region: 'ap-northeast-1'
:security_group:
:bastion:
:group_id: '[bastion Security Group Id. e.g. sg-xxxxxxxx]'
:defaults: ['1.1.1.1:22']
:webservice:
:group_id: '[web server(maybe elb) Security Group Id. e.g. sg-xxxxxxxx]'
:defaults: ['1.1.1.1:80']Set security group reset batch and reset everyday. This program will revoke security group ingress except default IPs set on above. Here is a sample crontab.
0 * * * * /opt/bastion/script/sgreset
Sgreset program's log will be output in log/sgreset.log .
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent