Skip to content

feat: use extension to provision Gateway #4

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Oct 9, 2025
Merged

feat: use extension to provision Gateway #4

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
3278784
feat: use extension to provision Gateway
thomaseizinger Oct 9, 2025
b2af4fa
curl is already installed
thomaseizinger Oct 9, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
37 changes: 24 additions & 13 deletions main.tf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -49,23 +49,34 @@ resource "azurerm_orchestrated_virtual_machine_scale_set" "firezone" {
public_key = var.admin_ssh_key
}
}
}

extension {
name = "firezone-gateway-install"
publisher = "Microsoft.Azure.Extensions"
type = "CustomScript"
type_handler_version = "2.1"

custom_data = base64encode(<<-EOF
#!/bin/bash
set -e
settings = jsonencode({
script = base64encode(<<-SCRIPT
#!/bin/bash
set -euo pipefail

sudo apt-get update
sudo apt-get install -y curl
# Export environment variables for the installation script
export FIREZONE_TOKEN="${var.firezone_token}"
export FIREZONE_VERSION="${var.firezone_version}"
export FIREZONE_NAME="${var.firezone_name}"
export FIREZONE_ID="$(head -c 32 /dev/urandom | sha256sum | cut -d' ' -f1)"
export FIREZONE_API_URL="${var.firezone_api_url}"

FIREZONE_TOKEN="${var.firezone_token}" \
FIREZONE_VERSION="${var.firezone_version}" \
FIREZONE_NAME="${var.firezone_name}" \
FIREZONE_ID="$(head -c 32 /dev/urandom | sha256sum | cut -d' ' -f1)" \
FIREZONE_API_URL="${var.firezone_api_url}" \
bash <(curl -fsSL https://raw.githubusercontent.com/firezone/firezone/main/scripts/gateway-systemd-install.sh)
# Download and execute the Firezone installation script
# The extension handler will retry this automatically if it fails
curl -fsSL https://raw.githubusercontent.com/firezone/firezone/main/scripts/gateway-systemd-install.sh | bash

EOF
)
echo "Firezone Gateway installation completed successfully"
SCRIPT
)
})
}

tags = var.extra_tags
Expand Down