diff --git a/azure-resource-manager/EventStoreCluster/EventStoreCluster.deployproj b/azure-resource-manager/EventStoreCluster/EventStoreCluster.deployproj index 54ac386..0c24979 100644 --- a/azure-resource-manager/EventStoreCluster/EventStoreCluster.deployproj +++ b/azure-resource-manager/EventStoreCluster/EventStoreCluster.deployproj @@ -45,12 +45,15 @@ + + + False diff --git a/azure-resource-manager/EventStoreCluster/Templates/azuredeploy.json b/azure-resource-manager/EventStoreCluster/Templates/azuredeploy.json index 3903373..1312d88 100644 --- a/azure-resource-manager/EventStoreCluster/Templates/azuredeploy.json +++ b/azure-resource-manager/EventStoreCluster/Templates/azuredeploy.json @@ -48,6 +48,20 @@ "description": "Virtual Network" } }, + "subnetName": { + "type": "string", + "defaultValue": "eventstore", + "metadata": { + "description": "Subnet" + } + }, + "namespace": { + "type": "string", + "defaultValue": "es", + "metadata": { + "description": "Namespace for vms, ips, etc." + } + }, "OS": { "type": "string", "defaultValue": "windows", @@ -86,7 +100,7 @@ }, "vmSizeEventStoreNode": { "type": "string", - "defaultValue": "Standard_D2", + "defaultValue": "Standard_DS2_v2", "allowedValues": [ "Standard_D1", "Standard_D2", @@ -100,7 +114,17 @@ "Standard_DS2", "Standard_DS3", "Standard_DS4", - "Standard_DS13" + "Standard_DS13", + "Standard_DS1_v2", + "Standard_DS2_v2", + "Standard_DS3_v2", + "Standard_DS4_v2", + "Standard_DS5_v2", + "Standard_DS11_v2", + "Standard_DS12_v2", + "Standard_DS13_v2", + "Standard_DS14_v2", + "Standard_DS15_v2" ], "metadata": { "description": "Size of the Event Store data nodes" @@ -115,8 +139,12 @@ }, "esVersion": { "type": "string", - "defaultValue": "3.8.1", + "defaultValue": "3.9.3", "allowedValues": [ + "3.9.3", + "3.9.2", + "3.9.1", + "3.9.0", "3.8.1", "3.8.0", "3.7.0", @@ -142,6 +170,15 @@ "description": "Event Store version to install" } }, + "esRunProjections": { + "type": "string", + "defaultValue": "All", + "allowedValues": [ + "None", + "System", + "All" + ] + }, "githubAccount": { "type": "string", "defaultValue": "pbolduc", @@ -195,7 +232,7 @@ "addressPrefix": "10.0.0.0/16", "subnet": { "eventstore": { - "name": "eventstore", + "name": "[parameters('subnetName')]", "prefix": "10.0.1.0/28", "networkPrefix": "10.0.1", "vnet": "[parameters('virtualNetworkName')]" @@ -210,8 +247,11 @@ "[concat(variables('templateBaseUrl'), 'master.ps1')]", "[concat(variables('templateBaseUrl'), 'create-data-disks.ps1')]", "[concat(variables('templateBaseUrl'), 'install-eventstore.ps1')]", + "[concat(variables('templateBaseUrl'), 'install-nginx.ps1')]", "[concat(variables('templateBaseUrl'), 'eventstore-windows-sources.csv')]", - "[concat(variables('templateBaseUrl'), 'install-nginx.ps1')]" + "[concat(variables('templateBaseUrl'), 'nginx.conf')]", + "[concat(variables('templateBaseUrl'), 'cacert.pem')]", + "[concat(variables('templateBaseUrl'), 'privkey.pem')]" ], "windowsSettings": { "imageReference": { @@ -229,7 +269,7 @@ "autoUpgradeMinorVersion": true, "settings": { "fileUris": "[variables('windowsScripts')]", - "commandToExecute": "[concat('powershell.exe -File master.ps1 -ClusterSize ',parameters('vmEventStoreNodeCount'),' -esVer ',parameters('esVersion'))]" + "commandToExecute": "[concat('powershell.exe -File master.ps1 -ClusterSize ',parameters('vmEventStoreNodeCount'),' -esVer ',parameters('esVersion'), ' -esRunProjections ',parameters('esRunProjections'))]" } } } @@ -281,6 +321,56 @@ "nodesPerStorageAccount": 2, "storageAccountType": "Premium_LRS" }, + "Standard_DS1_v2": { + "dataDisks": 2, + "nodesPerStorageAccount": 6, + "storageAccountType": "Premium_LRS" + }, + "Standard_DS2_v2": { + "dataDisks": 4, + "nodesPerStorageAccount": 4, + "storageAccountType": "Premium_LRS" + }, + "Standard_DS3_v2": { + "dataDisks": 8, + "nodesPerStorageAccount": 4, + "storageAccountType": "Premium_LRS" + }, + "Standard_DS4_v2": { + "dataDisks": 16, + "nodesPerStorageAccount": 2, + "storageAccountType": "Premium_LRS" + }, + "Standard_DS5_v2": { + "dataDisks": 16, + "nodesPerStorageAccount": 2, + "storageAccountType": "Premium_LRS" + }, + "Standard_DS11_v2": { + "dataDisks": 16, + "nodesPerStorageAccount": 2, + "storageAccountType": "Premium_LRS" + }, + "Standard_DS12_v2": { + "dataDisks": 16, + "nodesPerStorageAccount": 2, + "storageAccountType": "Premium_LRS" + }, + "Standard_DS13_v2": { + "dataDisks": 16, + "nodesPerStorageAccount": 2, + "storageAccountType": "Premium_LRS" + }, + "Standard_DS14_v2": { + "dataDisks": 16, + "nodesPerStorageAccount": 2, + "storageAccountType": "Premium_LRS" + }, + "Standard_DS15_v2": { + "dataDisks": 16, + "nodesPerStorageAccount": 2, + "storageAccountType": "Premium_LRS" + }, "Standard_A2": { "dataDisks": 4, "nodesPerStorageAccount": 6, @@ -427,7 +517,7 @@ "value": "[parameters('vmEventStoreDataDiskSize')]" }, "namespace": { - "value": "es" + "value": "[parameters('namespace')]" }, "osSettings": { "value": "[variables('osSettings')]" diff --git a/azure-resource-manager/EventStoreCluster/Templates/azuredeploy.param.dev.json b/azure-resource-manager/EventStoreCluster/Templates/azuredeploy.param.dev.json index 0696693..9ca0b5d 100644 --- a/azure-resource-manager/EventStoreCluster/Templates/azuredeploy.param.dev.json +++ b/azure-resource-manager/EventStoreCluster/Templates/azuredeploy.param.dev.json @@ -6,13 +6,31 @@ "value": "EventStoreAdmin" }, "adminPassword": { - "value": "YourEventStoreVMPassword" + "value": "YourEventStoreVMPassword!123" }, - "jumpbox": { + "jumpbox": { "value": "No" }, - "vmEventStoreNodeCount": { + "namespace": { + "value": "test-es" + }, + "subnetName": { + "value": "test-eventstore" + }, + "virtualNetworkName": { + "value": "test-es-vnet" + }, + "vmEventStoreNodeCount": { "value": 3 + }, + "vmSizeEventStoreNode": { + "value": "Standard_DS3_v2" + }, + "vmEventStoreDataDiskSize": { + "value": 128 + }, + "githubAccount": { + "value": "agconnections" } } } diff --git a/azure-resource-manager/EventStoreCluster/Templates/cacert.pem b/azure-resource-manager/EventStoreCluster/Templates/cacert.pem new file mode 100644 index 0000000..6126519 --- /dev/null +++ b/azure-resource-manager/EventStoreCluster/Templates/cacert.pem @@ -0,0 +1,23 @@ +-----BEGIN CERTIFICATE----- +MIID1zCCAr+gAwIBAgIJANlglY0XoRznMA0GCSqGSIb3DQEBBQUAMFAxCzAJBgNV +BAYTAlVTMREwDwYDVQQIEwhLZW50dWNreTEPMA0GA1UEBxMGTXVycmF5MR0wGwYD +VQQKExRBZyBDb25uZWN0aW9ucywgTExDLjAeFw0xNjA4MDIxNTQ2MDJaFw0xOTA4 +MDIxNTQ2MDJaMFAxCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhLZW50dWNreTEPMA0G +A1UEBxMGTXVycmF5MR0wGwYDVQQKExRBZyBDb25uZWN0aW9ucywgTExDLjCCASIw +DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM8g9qRHP08v8dbtaibb5mSWYlfL +SwhaAl2BCJMDuAyVfagTgOAX9Wx4C+ueLXlbMDhKTKIUFHwRvHxd2Hxt0vBvvyG2 +lW4LZP8lKWVesf3sfT7/g9/nY78LMlSmnDbL8arN0pZdoplE2/KRQyZlgSG8IfLx +lVmFqQ3X2ynJOcz1mb/rJW2hT7kEfX/kjD0QGs3c7AyEQTblpqlxKsb5PiVui4N/ +m8HWSa40cUANq92hgZp0lQEtoUdja49J3dvtlJbAENcQTc9soFV6x+p9yons52bc +czuF86oht4TXIxEHmhpJ0+tMabWaU4MAasvzDf+7N99O4gAp6UhZA/zz3fUCAwEA +AaOBszCBsDAdBgNVHQ4EFgQU29LSoW8IoIRUNLDTC6nYPYO/QRkwgYAGA1UdIwR5 +MHeAFNvS0qFvCKCEVDSw0wup2D2Dv0EZoVSkUjBQMQswCQYDVQQGEwJVUzERMA8G +A1UECBMIS2VudHVja3kxDzANBgNVBAcTBk11cnJheTEdMBsGA1UEChMUQWcgQ29u +bmVjdGlvbnMsIExMQy6CCQDZYJWNF6Ec5zAMBgNVHRMEBTADAQH/MA0GCSqGSIb3 +DQEBBQUAA4IBAQC3vrV+zMFKzjmNZ0WFA28K0Bes0RKxhEI9rVNxQgfZOlN9Th9S +UvF3FQeRYVEIA4jw/vIsbhShGrZt3D09z/r5OPBYuuJ3Dh9ob/W5KbpmLh615Rmv +euKnXNVKh3ylLukJqUCcgRyKi9xrWwGa1rnvXx0/kOIgq0KJIPBgGDJjiwDSD2n+ +5X0h8eGQDxqyB/wmjYhe80FgJrwlmzWx6korZ548N6m8rVLzxJE3TKpdPPzvh7Kp +IzPMhsvJf7Ml5W7o+Ym9Y7Rj+JMls5+6e1Qd65GdZ0+upwBRMPp5hVVYtyn6Mv85 +lhI45Bl/VvG7XDfKaMozHWX2M8DqI4utkKmE +-----END CERTIFICATE----- diff --git a/azure-resource-manager/EventStoreCluster/Templates/eventstore-ubuntu-sources.txt b/azure-resource-manager/EventStoreCluster/Templates/eventstore-ubuntu-sources.txt index 4f84350..d320687 100644 --- a/azure-resource-manager/EventStoreCluster/Templates/eventstore-ubuntu-sources.txt +++ b/azure-resource-manager/EventStoreCluster/Templates/eventstore-ubuntu-sources.txt @@ -2,6 +2,10 @@ # to do: make this file contents something unbuntu shell script can process natively # +"3.9.3": "http://download.geteventstore.com/binaries/EventStore-OSS-Ubuntu-14.04-v3.9.3.tar.gz", +"3.9.2": "http://download.geteventstore.com/binaries/EventStore-OSS-Ubuntu-14.04-v3.9.2.tar.gz", +"3.9.1": "http://download.geteventstore.com/binaries/EventStore-OSS-Ubuntu-14.04-v3.9.1.tar.gz", +"3.9.0": "http://download.geteventstore.com/binaries/EventStore-OSS-Ubuntu-14.04-v3.9.0.tar.gz", "3.8.1": "http://download.geteventstore.com/binaries/EventStore-OSS-Ubuntu-14.04-v3.8.1.tar.gz", "3.8.0": "http://download.geteventstore.com/binaries/EventStore-OSS-Ubuntu-14.04-v3.8.0.tar.gz", "3.7.0": "http://download.geteventstore.com/binaries/EventStore-OSS-Ubuntu-14.04-v3.7.0.tar.gz", diff --git a/azure-resource-manager/EventStoreCluster/Templates/eventstore-windows-sources.csv b/azure-resource-manager/EventStoreCluster/Templates/eventstore-windows-sources.csv index a6483bb..9951652 100644 --- a/azure-resource-manager/EventStoreCluster/Templates/eventstore-windows-sources.csv +++ b/azure-resource-manager/EventStoreCluster/Templates/eventstore-windows-sources.csv @@ -1,4 +1,8 @@ -"3.8.1",http://download.geteventstore.com/binaries/EventStore-OSS-Win-v3.8.1.zip +"3.9.3",http://download.geteventstore.com/binaries/EventStore-OSS-Win-v3.9.3.zip +"3.9.2",http://download.geteventstore.com/binaries/EventStore-OSS-Win-v3.9.2.zip +"3.9.1",http://download.geteventstore.com/binaries/EventStore-OSS-Win-v3.9.1.zip +"3.9.0",http://download.geteventstore.com/binaries/EventStore-OSS-Win-v3.9.0.zip +"3.8.1",http://download.geteventstore.com/binaries/EventStore-OSS-Win-v3.8.1.zip "3.8.0",http://download.geteventstore.com/binaries/EventStore-OSS-Win-v3.8.0.zip "3.7.0",http://download.geteventstore.com/binaries/EventStore-OSS-Win-v3.7.0.zip "3.6.3",http://download.geteventstore.com/binaries/EventStore-OSS-Win-v3.6.3.zip @@ -17,4 +21,4 @@ "3.0.3",http://download.geteventstore.com/binaries/EventStore-OSS-Win-v3.0.3.zip "3.0.2",http://download.geteventstore.com/binaries/EventStore-OSS-Win-v3.0.2.zip "3.0.1",http://download.geteventstore.com/binaries/EventStore-OSS-Win-v3.0.1.zip -"3.0.0",http://download.geteventstore.com/binaries/EventStore-OSS-Win-v3.0.0.zip +"3.0.0",http://download.geteventstore.com/binaries/EventStore-OSS-Win-v3.0.0.zip \ No newline at end of file diff --git a/azure-resource-manager/EventStoreCluster/Templates/install-eventstore.ps1 b/azure-resource-manager/EventStoreCluster/Templates/install-eventstore.ps1 index 43af361..ea795cc 100644 --- a/azure-resource-manager/EventStoreCluster/Templates/install-eventstore.ps1 +++ b/azure-resource-manager/EventStoreCluster/Templates/install-eventstore.ps1 @@ -23,7 +23,9 @@ param ( [Int] $ExtHttpPort = 2113, [string] - $downloadDirectory + $downloadDirectory, + [string] + $RunProjections = "All" ) function Extract-ZipFile($file, $destination) { @@ -108,6 +110,7 @@ Add-Content F:\eventstore\config.yaml "IntIp: $ipAddress`n" Add-Content F:\eventstore\config.yaml "ClusterSize: $ClusterSize`n" Add-Content F:\eventstore\config.yaml "DiscoverViaDns: false`n" Add-Content F:\eventstore\config.yaml "GossipSeed: 10.0.1.4:$IntHttpPort,10.0.1.5:$IntHttpPort,10.0.1.6:$IntHttpPort`n" +Add-Content F:\eventstore\config.yaml "RunProjections: $RunProjections`n" Add-Content F:\eventstore\install-service.cmd "F:\nssm-2.24\win64\nssm.exe install EventStore F:\eventstore\bin\EventStore.ClusterNode.exe --config F:\eventstore\config.yaml" Add-Content F:\eventstore\install-service.cmd "F:\nssm-2.24\win64\nssm.exe set EventStore Description ""The EventStore service""" diff --git a/azure-resource-manager/EventStoreCluster/Templates/install-nginx.ps1 b/azure-resource-manager/EventStoreCluster/Templates/install-nginx.ps1 index 1934f7b..117cb02 100644 --- a/azure-resource-manager/EventStoreCluster/Templates/install-nginx.ps1 +++ b/azure-resource-manager/EventStoreCluster/Templates/install-nginx.ps1 @@ -47,6 +47,24 @@ New-NetFirewallRule -Name Allow_80_In ` -Action Allow ` -LocalPort 80 +New-NetFirewallRule -Name Allow_443_In ` + -DisplayName "Allow inbound port 443 traffic" ` + -Protocol TCP ` + -Direction Inbound ` + -Action Allow ` + -LocalPort 443 + +New-NetFirewallRule -Name Allow_3389_In ` + -DisplayName "Allow inbound port 3389 traffic" ` + -Protocol TCP ` + -Direction Inbound ` + -Action Allow ` + -LocalPort 3389 + +Copy-Item '.\nginx.conf' 'F:\nginx\bin\nginx-1.10.1\conf\nginx.conf' -Force +Copy-Item '.\cacert.pem' 'F:\nginx\bin\nginx-1.10.1\conf\cacert.pem' -Force +Copy-Item '.\privkey.pem' 'F:\nginx\bin\nginx-1.10.1\conf\privkey.pem' -Force + Add-Content F:\nginx\install-service.cmd "F:\nssm-2.24\win64\nssm.exe install Nginx F:\nginx\bin\nginx-1.10.1\nginx.exe" Add-Content F:\nginx\install-service.cmd "F:\nssm-2.24\win64\nssm.exe set Nginx Description ""The Nginx service""" diff --git a/azure-resource-manager/EventStoreCluster/Templates/master.ps1 b/azure-resource-manager/EventStoreCluster/Templates/master.ps1 index a586b4f..a4d14d7 100644 --- a/azure-resource-manager/EventStoreCluster/Templates/master.ps1 +++ b/azure-resource-manager/EventStoreCluster/Templates/master.ps1 @@ -4,8 +4,9 @@ param( [Int32]$ClusterSize, [string]$esVer, + [string]$esRunProjections, [string]$nginxVer="1.10.1", - [string]$nginxUrl="https://landdb.blob.core.windows.net/eventstore-cluster-resources/nginx-1.10.1.zip" + [string]$nginxUrl="http://nginx.org/download/nginx-1.10.1.zip" ) $ErrorActionPreference="SilentlyContinue" @@ -20,6 +21,7 @@ New-Item $downloadDirectory -ItemType Directory | Out-Null # TODO: These parameters should come from the template! . .\install-eventstore.ps1 -EventStoreVersion $esVer ` + -RunProjections $esRunProjections ` -nssmDownloadUrl "https://nssm.cc/release/nssm-2.24.zip" ` -ClusterSize $ClusterSize ` -downloadDirectory $downloadDirectory diff --git a/azure-resource-manager/EventStoreCluster/Templates/nginx.conf b/azure-resource-manager/EventStoreCluster/Templates/nginx.conf new file mode 100644 index 0000000..95011f2 --- /dev/null +++ b/azure-resource-manager/EventStoreCluster/Templates/nginx.conf @@ -0,0 +1,129 @@ + +#user nobody; +worker_processes 1; + +#error_log logs/error.log; +#error_log logs/error.log notice; +#error_log logs/error.log info; + +#pid logs/nginx.pid; + + +events { + worker_connections 1024; +} + +stream { + server { + listen 1113; + proxy_pass 127.0.0.1:1113; + } +} + +http { + include mime.types; + default_type application/octet-stream; + + #log_format main '$remote_addr - $remote_user [$time_local] "$request" ' + # '$status $body_bytes_sent "$http_referer" ' + # '"$http_user_agent" "$http_x_forwarded_for"'; + + #access_log logs/access.log main; + + sendfile on; + #tcp_nopush on; + + #keepalive_timeout 0; + keepalive_timeout 65; + + #gzip on; + + server { + listen 80; + server_name localhost; + + #charset koi8-r; + + #access_log logs/host.access.log main; + + location / { + proxy_pass http://127.0.0.1:2113; + proxy_set_header X-Forwarded-Port 80; + proxy_set_header X-Forwarded-Host $http_host; + + #root html; + #index index.html index.htm; + } + + #error_page 404 /404.html; + + # redirect server error pages to the static page /50x.html + # + error_page 500 502 503 504 /50x.html; + location = /50x.html { + root html; + } + + # proxy the PHP scripts to Apache listening on 127.0.0.1:80 + # + #location ~ \.php$ { + # proxy_pass http://127.0.0.1; + #} + + # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000 + # + #location ~ \.php$ { + # root html; + # fastcgi_pass 127.0.0.1:9000; + # fastcgi_index index.php; + # fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name; + # include fastcgi_params; + #} + + # deny access to .htaccess files, if Apache's document root + # concurs with nginx's one + # + #location ~ /\.ht { + # deny all; + #} + } + + + # another virtual host using mix of IP-, name-, and port-based configuration + # + #server { + # listen 8000; + # listen somename:8080; + # server_name somename alias another.alias; + + # location / { + # root html; + # index index.html index.htm; + # } + #} + + + # HTTPS server + server { + listen 443 ssl; + server_name localhost; + + ssl_certificate F:/nginx/bin/nginx-1.10.1/conf/cacert.pem; + ssl_certificate_key F:/nginx/bin/nginx-1.10.1/conf/privkey.pem; + + ssl_session_cache shared:SSL:1m; + ssl_session_timeout 5m; + + ssl_ciphers HIGH:!aNULL:!MD5; + ssl_prefer_server_ciphers on; + + location / { + proxy_pass http://127.0.0.1:2113; + proxy_pass_header Set-Cookie; + proxy_pass_header P3P; + proxy_set_header X-Forwarded-Port 443; + proxy_set_header X-Forwarded-Host $http_host; + proxy_set_header X-Forwarded-Proto https; + } + } +} diff --git a/azure-resource-manager/EventStoreCluster/Templates/privkey.pem b/azure-resource-manager/EventStoreCluster/Templates/privkey.pem new file mode 100644 index 0000000..3216c54 --- /dev/null +++ b/azure-resource-manager/EventStoreCluster/Templates/privkey.pem @@ -0,0 +1,27 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIEowIBAAKCAQEAzyD2pEc/Ty/x1u1qJtvmZJZiV8tLCFoCXYEIkwO4DJV9qBOA +4Bf1bHgL654teVswOEpMohQUfBG8fF3YfG3S8G+/IbaVbgtk/yUpZV6x/ex9Pv+D +3+djvwsyVKacNsvxqs3Sll2imUTb8pFDJmWBIbwh8vGVWYWpDdfbKck5zPWZv+sl +baFPuQR9f+SMPRAazdzsDIRBNuWmqXEqxvk+JW6Lg3+bwdZJrjRxQA2r3aGBmnSV +AS2hR2Nrj0nd2+2UlsAQ1xBNz2ygVXrH6n3KieznZtxzO4XzqiG3hNcjEQeaGknT +60xptZpTgwBqy/MN/7s3307iACnpSFkD/PPd9QIDAQABAoIBAHDJy2SjY2cUfYWC +3KXyYp/tf/m8usv+b4FJLUkY4lT/5l/q1uewRDVfnWYdSTfnHvfYBajQdGMnKVMz +qxn+l7nTr+mEyhQVYlbJfqQzj4rtBzqR2tbG4nr6dtq/qxrvrVZMI9s7e7ooU/jf +fwheh5W+I2JuiNwpu2fNXguABtiC/N2MdgmPY8TXjfVIobxAn7Ldj0X7D0DUbn2J +dyka4Es7fkK1ObuPrW0pqBBmvN3+YbLRLywwn7g0PYp7g6JwodSGAu67nWqYwBtI +Q5n50Mq9GM33WeudweGfuhk31yTVZNk75QmVowrEeQFoBGaWFWMluaeU1dcCFvOJ +rO+NezUCgYEA/UErejhcrYntb7f5suS2vJmPM0u8XmT/rYHkpgL1wMnD0Foe11eZ +RJAoshMn7fgY/RSOunQs/e07R6hyqY5Y2RJ0aSgQKKf4TJRllMuv4cCKviJTChRd +znHi4oTIVAZQbGn72s20jEToDQFzFierGaWYYwwdgpfLwFHn3g49Ri8CgYEA0V/J +HoWJSd6bw8Bz5fFMqgKYwVt7UIoCCnFbbsKxhcsWQg63xW9me5iA940lO3o83HYY +dJzqK+EMFiqfWcq/x1K+BL868BrObZ8e8wQx5Rwfh69DP2zQSce7cc5EZF4LxxFK +uLkWgiBHKaI4TgQqXwqnMM7tpRPhClspC0uzORsCgYEAlqhNQAEFiSszN7G/dp++ +4cWMPdzBK3pz63kJV4UNQ2oD9g+Wp05yXCpSO1VP/K4J14yCOANivJCDImbgB2Qq +EMB8xg3SRw1dldj18SWW9PqAzwlGUwm4oFZ5vX12Wx4Ce+w0qn6S+JsJXKtPFo/0 +pmYvmESdzZGV4UwYXq4j33sCgYAJdatvjpb6WG1vNbXG0NUm5UEjk0+J/wJCmIaK +BY/hvKA/0cxpxjO6J9TD2oOxIT+4sjk+o4xM+TkDk19pvihWCB3/tughywRCnarX +Tfw3HsMp7Tg7mF38x2JnrOsYIcukbdqTaAFlVbIBZovmsnd7nc6Z/O9twu0q+51q +Hjx1uwKBgFeswljQYFiYmWYmqj3AijM4VyNoqYWg3+agd4T4V8u5Y+ljI/BiPQgq +r1Jb1ctnCP7hcN+2Fl7ixgtlrH50PUT1XzqTuGbe3bT6ezcdF8XRGgRzUiutnQ9a +MIi2utdBNdRyafQ40wZzLnss6N+H1Kpf1VIdTG9zidEnicVZshho +-----END RSA PRIVATE KEY----- diff --git a/azure-resource-manager/EventStoreCluster/Templates/shared-resources.json b/azure-resource-manager/EventStoreCluster/Templates/shared-resources.json index 08dbcb8..4828376 100644 --- a/azure-resource-manager/EventStoreCluster/Templates/shared-resources.json +++ b/azure-resource-manager/EventStoreCluster/Templates/shared-resources.json @@ -51,6 +51,20 @@ "direction": "Inbound" } }, + { + "name": "Allow-EventStore-Web-HTTPS", + "properties": { + "description": "Allows secure inbound web traffic from anyone", + "protocol": "Tcp", + "sourcePortRange": "*", + "destinationPortRange": "443", + "sourceAddressPrefix": "Internet", + "destinationAddressPrefix": "VirtualNetwork", + "access": "Allow", + "priority": 110, + "direction": "Inbound" + } + }, { "name": "Allow-EventStore-TCP", "properties": { @@ -61,7 +75,7 @@ "sourceAddressPrefix": "Internet", "destinationAddressPrefix": "VirtualNetwork", "access": "Allow", - "priority": 110, + "priority": 120, "direction": "Inbound" } }, @@ -75,7 +89,21 @@ "sourceAddressPrefix": "Internet", "destinationAddressPrefix": "VirtualNetwork", "access": "Allow", - "priority": 120, + "priority": 130, + "direction": "Inbound" + } + }, + { + "name": "Allow-RDP-HTTP", + "properties": { + "description": "Allows inbound RDP HTTP traffic from anyone", + "protocol": "Tcp", + "sourcePortRange": "*", + "destinationPortRange": "3389", + "sourceAddressPrefix": "Internet", + "destinationAddressPrefix": "VirtualNetwork", + "access": "Allow", + "priority": 140, "direction": "Inbound" } }