jeffrey_miller_flask_ftp/aws/template.yml

Resources:
  Ec2Instance:
    Type: AWS::EC2::Instance
    Properties:
      InstanceType: t2.micro
      ImageId: ami-089fe97bc00bff7cc # AMI Debian
      KeyName: universeBlender
      Tags:
        - Key: Name
          Value: UniverseBlender
        - Key: Owner
          Value: Jeffrey Miller
      UserData:
        Fn::Base64: !Sub |
          #!/bin/bash
          mkdir /root/.ssh/
          cp -f /home/admin/.ssh/authorized_keys /root/.ssh/
          apt update
          apt install -y vsftpd python3 python3-pip sqlite3 python3-waitress git jq curl
          python3 -m pip install flask flask-sqlalchemy
          useradd -m flask
          usermod -L flask
          echo "flask      ALL=(ALL)     NOPASSWD: /home/flask/jeffrey_miller_flask_ftp/scripts/create_user.sh" >> /etc/sudoers
          echo "flask      ALL=(ALL)     NOPASSWD: /home/flask/jeffrey_miller_flask_ftp/scripts/delete_user.sh" >> /etc/sudoers
          sed -i "s/\#write_enable=YES/write_enable=YES/" /etc/vsftpd.conf
          systemctl restart vsftpd
          echo 'AllowUsers root admin' >> /etc/ssh/sshd_config
          systemctl reload sshd
          chmod 700 /home/flask/
          mkdir -p /home/flask/.ssh/
          echo "-----BEGIN OPENSSH PRIVATE KEY-----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\ntp0Rxgk9+lnbUAAAAKdGVzdEBBcmF3bgE=\n-----END OPENSSH PRIVATE KEY-----" | sed 's/\\n/\n/g' > /root/.ssh/git
          chmod 700 /root/.ssh/git
          echo "Host *" >> /root/.ssh/config
          echo "IdentityFile ~/.ssh/git" >> /root/.ssh/config
          ssh-keyscan github.com >> /root/.ssh/known_hosts
          git clone git@github.com:crisosphinx/jeffrey_miller_flask_ftp.git /home/flask/jeffrey_miller_flask_ftp
          cp /home/flask/jeffrey_miller_flask_ftp/flask-ftp.service /etc/systemd/user/
          chmod a+r /etc/systemd/user/flask-ftp.service
          systemctl enable /etc/systemd/user/flask-ftp.service
          systemctl daemon-reload
          systemctl start flask-ftp.service
          chown -R flask:flask /home/flask