Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Pulumi: SRE DNS filtering #1566

Merged
merged 33 commits into from
Aug 30, 2023
Merged

Pulumi: SRE DNS filtering #1566

merged 33 commits into from
Aug 30, 2023

Commits on Aug 17, 2023

  1. ✨ Initial empty component

    @jemrobinson
    jemrobinson committed Aug 17, 2023
    Configuration menu
    Copy the full SHA
    97c32f6 View commit details
    Browse the repository at this point in the history

  2. ✨ Add DnsContainers subnet

    @jemrobinson
    jemrobinson committed Aug 17, 2023
    Configuration menu
    Copy the full SHA
    0e4530b View commit details
    Browse the repository at this point in the history

  3. ⚗️ Test allow/deny lists

    @jemrobinson
    jemrobinson committed Aug 17, 2023
    Configuration menu
    Copy the full SHA
    d3accdb View commit details
    Browse the repository at this point in the history

Commits on Aug 18, 2023

  1. 🔧 Allow connections between DNS containers and configuration data

    @jemrobinson
    jemrobinson committed Aug 18, 2023
    Configuration menu
    Copy the full SHA
    a22c94a View commit details
    Browse the repository at this point in the history

  2. ✨ Add AdGuard container image with basic config file

    @jemrobinson
    jemrobinson committed Aug 18, 2023
    Configuration menu
    Copy the full SHA
    1139c1e View commit details
    Browse the repository at this point in the history

Commits on Aug 21, 2023

  1. ✨ Add get_id_from_vnet transformation

    @jemrobinson
    jemrobinson committed Aug 21, 2023
    Configuration menu
    Copy the full SHA
    ccd1337 View commit details
    Browse the repository at this point in the history

Commits on Aug 22, 2023

  1. 🚚 Add separate IP ranges for SRE DNS servers

    @jemrobinson
    jemrobinson committed Aug 22, 2023
    Configuration menu
    Copy the full SHA
    0350ae8 View commit details
    Browse the repository at this point in the history

  2. 🔧 Update network rule enum

    @jemrobinson
    jemrobinson committed Aug 22, 2023
    Configuration menu
    Copy the full SHA
    5604156 View commit details
    Browse the repository at this point in the history

  3. 🚚 Move DNS server into dedicated subnet

    @jemrobinson
    jemrobinson committed Aug 22, 2023
    Configuration menu
    Copy the full SHA
    6585b6c View commit details
    Browse the repository at this point in the history

  4. ✨ Peer SRE and DNS virtual networks

    @jemrobinson
    jemrobinson committed Aug 22, 2023
    Configuration menu
    Copy the full SHA
    9283210 View commit details
    Browse the repository at this point in the history

  5. 🚚 Move private DNS zone to DNS resource group and virtual network to … 

    …allow DNS server to resolve zone entries
    @jemrobinson
    jemrobinson committed Aug 22, 2023
    Configuration menu
    Copy the full SHA
    7f647ef View commit details
    Browse the repository at this point in the history

  6. 🔧 Make SRE DNS server default for SRE virtual network

    @jemrobinson
    jemrobinson committed Aug 22, 2023
    Configuration menu
    Copy the full SHA
    e595540 View commit details
    Browse the repository at this point in the history

  7. 🔧 Link SHM private zones to SRE DNS virtual network

    @jemrobinson
    jemrobinson committed Aug 22, 2023
    Configuration menu
    Copy the full SHA
    7686766 View commit details
    Browse the repository at this point in the history

  8. 👽 Expand list of allowed_dns_lookups

    @jemrobinson
    jemrobinson committed Aug 22, 2023
    Configuration menu
    Copy the full SHA
    c478c85 View commit details
    Browse the repository at this point in the history

  9. 🤡 Temporarily allow access to the web interface of the DNS server for… 

    … easier debugging
    @jemrobinson
    jemrobinson committed Aug 22, 2023
    Configuration menu
    Copy the full SHA
    24f979b View commit details
    Browse the repository at this point in the history

  10. ⚰️ Remove link from SRE virtual network to SHM private DNS zones

    @jemrobinson
    jemrobinson committed Aug 22, 2023
    Configuration menu
    Copy the full SHA
    ed00ac5 View commit details
    Browse the repository at this point in the history

Commits on Aug 23, 2023

  1. 🔧 Use SRE DNS for SRE container groups

    @jemrobinson
    jemrobinson committed Aug 23, 2023
    Configuration menu
    Copy the full SHA
    2767ff6 View commit details
    Browse the repository at this point in the history

  2. 👽 Link SRE virtual network to StorageAccount private DNS zones for us… 

    …e by Azure Container Instances
    @jemrobinson
    jemrobinson committed Aug 23, 2023
    Configuration menu
    Copy the full SHA
    66687ef View commit details
    Browse the repository at this point in the history

Commits on Aug 24, 2023

  1. 🔒 Add bcrypt_encode function to generate a salted, bcrypt-ed password… 

    … from an input string
    @jemrobinson
    jemrobinson committed Aug 24, 2023
    Configuration menu
    Copy the full SHA
    816ce28 View commit details
    Browse the repository at this point in the history

  2. 🏷️ Add bcrypt types

    @jemrobinson
    jemrobinson committed Aug 24, 2023
    Configuration menu
    Copy the full SHA
    ed04cfc View commit details
    Browse the repository at this point in the history

  3. ♻️ Switch to using upstream AdGuardHome image with custom overwrite o… 

    …f the entrypoint
    @jemrobinson
    jemrobinson committed Aug 24, 2023
    Configuration menu
    Copy the full SHA
    b2c0372 View commit details
    Browse the repository at this point in the history

  4. 🔒 Store DNS server password in SRE keyvault

    @jemrobinson
    jemrobinson committed Aug 24, 2023
    Configuration menu
    Copy the full SHA
    9939f5f View commit details
    Browse the repository at this point in the history

  5. ♻️ Use AdGuard arguments from entrypoint.sh

    @jemrobinson
    jemrobinson committed Aug 24, 2023
    Configuration menu
    Copy the full SHA
    b53c8ce View commit details
    Browse the repository at this point in the history

  6. 🔧 Block access to AzurePlatformDNS from all SRE subnets except Applic… 

    …ationGateway which requires specific rules
    @jemrobinson
    jemrobinson committed Aug 24, 2023
    Configuration menu
    Copy the full SHA
    f6344b6 View commit details
    Browse the repository at this point in the history

  7. 🔧 Only allow traffic on port 53 to/from DNS server

    @jemrobinson
    jemrobinson committed Aug 24, 2023
    Configuration menu
    Copy the full SHA
    bb289e3 View commit details
    Browse the repository at this point in the history

Commits on Aug 29, 2023

  1. 📝 Explain use of '168.63.129.16' 

    Co-authored-by: Jim Madge <[email protected]>
    @jemrobinson @JimMadge
    jemrobinson and JimMadge authored Aug 29, 2023
    Configuration menu
    Copy the full SHA
    e0861fa View commit details
    Browse the repository at this point in the history

  2. 📝 Add link to AdBlock syntax 

    Co-authored-by: Jim Madge <[email protected]>
    @jemrobinson @JimMadge
    jemrobinson and JimMadge authored Aug 29, 2023
    Configuration menu
    Copy the full SHA
    b0b9dd0 View commit details
    Browse the repository at this point in the history

  3. ⚰️ Remove unused functions from type-hints

    @jemrobinson
    jemrobinson committed Aug 29, 2023
    Configuration menu
    Copy the full SHA
    f9f57d8 View commit details
    Browse the repository at this point in the history

  4. ⚰️ Drop configurable filter-deny in favour of hard-coded '*.*'

    @jemrobinson
    jemrobinson committed Aug 29, 2023
    Configuration menu
    Copy the full SHA
    eaae180 View commit details
    Browse the repository at this point in the history

  5. 🔧 Restrict AdGuard outbound traffic to port 53

    @jemrobinson
    jemrobinson committed Aug 29, 2023
    Configuration menu
    Copy the full SHA
    1860e93 View commit details
    Browse the repository at this point in the history

Commits on Aug 30, 2023

  1. 🔧 Simplify allowed DNS lookups by removing wildcarded subdomains

    @jemrobinson
    jemrobinson committed Aug 30, 2023
    Configuration menu
    Copy the full SHA
    9ac839a View commit details
    Browse the repository at this point in the history

  2. ⚗️ Use repeatable bcrypt salt via a salt_generator argument to bcrypt… 

    …_encode
    @jemrobinson
    jemrobinson committed Aug 30, 2023
    Configuration menu
    Copy the full SHA
    56e7b8e View commit details
    Browse the repository at this point in the history

  3. ⚰️ Switch from re-implementing gensalt to storing a salt on first run

    @jemrobinson
    jemrobinson committed Aug 30, 2023
    Configuration menu
    Copy the full SHA
    d6d8445 View commit details
    Browse the repository at this point in the history