openvpn-master.json

{
    "AWSTemplateFormatVersion": "2010-09-09",
    "Description": "Set up an OpenVPN server",
    "Metadata": {},
    "Parameters": {
        "OpenVpnAmiId": {
            "Default": "ami-0abbb3ceae54aa9fa",
            "Description": "Provide the AWS Marketplace OpenVPN AMI ID",
            "Type": "AWS::EC2::Image::Id"
        },
        "AdminUserName": {
            "Default": "openvpn",
            "Description": "OpenVPN Admin User",
            "Type": "String"
        },
        "AdminPassword": {
            "Description": "OpenVPN Admin Password",
            "Type": "String",
            "NoEcho": true,
            "MinLength": 8,
            "MaxLength": 32
        },
        "InstanceType": {
            "Default": "t2.nano",
            "Description": "Instance type",
            "Type": "String"
        },
        "VpnSecurityGroupID": {
            "Description": "The VPC default Security GroupID",
            "Type": "AWS::EC2::SecurityGroup::Id"
        }
    },
    "Mappings": {},
    "Conditions": {},
    "Resources": {
        "VpnSecurityGroup": {
            "Type": "AWS::EC2::SecurityGroup",
            "Properties": {
                "GroupDescription": "OpenVPN security group created by cloudformation",
                "SecurityGroupIngress": [
                    {
                        "IpProtocol": "tcp",
                        "FromPort": 443,
                        "ToPort": 443,
                        "CidrIp": "0.0.0.0/0"
                    },
                    {
                        "IpProtocol": "tcp",
                        "FromPort": 943,
                        "ToPort": 943,
                        "CidrIp": "0.0.0.0/0"
                    },
                    {
                        "IpProtocol": "udp",
                        "FromPort": 1194,
                        "ToPort": 1194,
                        "CidrIp": "0.0.0.0/0"
                    }
                ]
            }
        },
        "OpenVpnInstance": {
            "Type": "AWS::EC2::Instance",
            "Properties": {
                "ImageId": {
                    "Ref": "OpenVpnAmiId"
                },
                "InstanceType": {
                    "Ref": "InstanceType"
                },
                "UserData": {
                    "Fn::Base64": {
                        "Fn::Join": [
                            "",
                            [
                                "#!/bin/bash -xe\n",
                                "apt-get update -y\n",
                                "public_hostname=",
                                {
                                    "Fn::ImportValue": "EIPAddress"
                                },
                                "\n",
                                "admin_user=",
                                {
                                    "Ref": "AdminUserName"
                                },
                                "\n",
                                "admin_pw=",
                                {
                                    "Ref": "AdminPassword"
                                },
                                "\n",
                                "reroute_gw=1\n",
                                "\n"
                            ]
                        ]
                    }
                },
                "SecurityGroupIds": [
                    {
                        "Ref": "VpnSecurityGroupID"
                    }
                ],
                "SecurityGroups": [
                    {
                        "Ref": "VpnSecurityGroup"
                    }
                ]
            }
        },
        "OpenVpnEipAsso": {
            "Type": "AWS::EC2::EIPAssociation",
            "Properties": {
                "AllocationId": {
                    "Fn::ImportValue": "EIPAllocationId"
                },
                "InstanceId": {
                    "Ref": "OpenVpnInstance"
                }
            }
        }
    },
    "Outputs": {
        "OpenVPNServerAdminURL": {
            "Description": "OpenVPN Admin URL",
            "Value": {
                "Fn::Join": [
                    "",
                    [
                        "https://",
                        {
                            "Fn::ImportValue": "EIPAddress"
                        },
                        ":943/admin"
                    ]
                ]
            }
        },
        "VpnInstanceId": {
            "Description": "ID of VPN Instance",
            "Value": {
                "Ref": "OpenVpnInstance"
            }
        }
    }
}