Compartmentalized Install - scottgoetz/ansible GitHub Wiki

  1. Generate SSH Keys and password hash for unprivileged user
  2. Review all playbooks and update variables with current info on hand (SSH key location, password hash, whitelist IPs, etc.)
  3. Run secureSetup.yml on Core Server (server that GoPhish is installed on), Web Redirector, and Mail Server
  4. Setup DNS records. Due to the nature of how letsencrypt is configured to generate the SSL cert when using sub domains, each sub domain A record should initially point to the Web Redirector IP address. Otherwise, letsencrypt will throw an error.
  5. Update and verify webRedirector.yml variables
  6. Run webRedirector.yml on Web Redirector
  7. Update and verify mailServer.yml variables
  8. Run mailServer.yml on Mail Server
  9. Configure DNS records using info generated from mailServer.yml
  10. Configure GoPhish before building
  11. Update and verify GoPhish.yml/GhostPhish.yml variables
  12. Run GoPhish.yml/GhostPhish.yml on Core
  13. Update .htaccess on Web Redirector