azuredeploy-TwoNICs.json

{
  "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
  "contentVersion": "1.0.0.0",
  "parameters": {
    "virtualMachineSize": {
      "type": "string",
      "defaultValue": "Standard_B2s",
      "metadata": {
        "description": "VM size, please choose a size which allow 2 NICs."
      }
    },
    "virtualMachineName": {
      "type": "string",
      "metadata": {
        "description": "OPN NVA Manchine Name"
      }
    },
    "TempUsername": {
      "type": "string",
      "metadata": {
        "description": "Default Temporary Admin username (Only used to deploy)"
      }
    },
    "TempPassword": {
      "type": "securestring",
      "metadata": {
        "description": "Default Temporary Admin password (Only used to deploy)"
      }
    },
    "existingVirtualNetworkName": {
      "type": "string",
      "metadata": {
      "description": "Existing Virtual Nework Name"
      }
    },
    "existingUntrustedSubnet": {
      "type": "string",
      "metadata": {
      "description": "Type Existing (Untrusted) Subnet Name"
       }
    },
    "existingTrustedSubnet": {
      "type": "string",
       "metadata": {
       "description": "Type Existing (Trusted) Subnet Name"
          }
    },
      "PublicIPAddressSku": {
      "type": "string",
      "defaultValue": "Basic",
      "allowedValues": [
        "Basic",
        "Standard"
      ],
      "metadata": {
        "description": "Specify Public IP SKU either Basic (lowest cost) or Standard (Required for HA LB)"
      }
    },
    "OpnScriptURI": {
      "type": "string",
      "defaultValue": "https://raw.githubusercontent.com/dmauser/opnazure/master/scripts/",
            "metadata": {
      "description": "URI for Custom OPN Script and Config"
      }
    },
    "ShellScriptName": {
      "type": "string",
      "defaultValue": "configureopnsense.sh",
            "metadata": {
      "description": "Shell Script to be executed"
      }
    },
    "OpnConfigFile": {
      "type": "string",
      "defaultValue": "config.xml",
            "metadata": {
      "description": "OPNSense XML Config File"
      }
    }  
  },
  "variables": {
    "extensionName":"CustomScript",
    "UntrustedNIC": "[concat(parameters('virtualMachineName'),'-Untrusted-NIC')]",
    "TrustedNIC": "[concat(parameters('virtualMachineName'),'-Trusted-NIC')]",
    "publicIPAddressName": "[concat(parameters('virtualMachineName'),'-PublicIP')]",
    "subnet1Ref": "[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('existingVirtualNetworkName'), parameters('existingUntrustedSubnet'))]",
    "subnet2Ref": "[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('existingVirtualNetworkName'), parameters('existingTrustedSubnet'))]",
    "networkSecurityGroupName": "[concat(parameters('virtualMachineName'),'-NSG')]",
    "location": "[resourceGroup().location]"
  },
  "resources": [
    {
      "name": "[parameters('virtualMachineName')]",
      "type": "Microsoft.Compute/virtualMachines",
      "apiVersion": "2017-03-30",
      "location": "[variables('location')]",
      "comments": "This is the virtual machine that you're building.",
      "dependsOn": [
        "[variables('UntrustedNIC')]",
        "[variables('TrustedNIC')]"
      ],
      "properties": {
        "osProfile": {
          "computerName": "[parameters('virtualMachineName')]",
          "adminUsername": "[parameters('TempUsername')]",
          "adminPassword": "[parameters('TempPassword')]"
        },
        "hardwareProfile": {
          "vmSize": "[parameters('virtualMachineSize')]"
        },
        "storageProfile": {
          "imageReference": {
            "publisher": "MicrosoftOSTC",
            "offer": "FreeBSD",
            "sku": "12.0",
            "version": "latest"
          },
          "osDisk": {
            "createOption": "FromImage"
          },
          "dataDisks": []
        },
        "networkProfile": {
          "networkInterfaces": [
            {
              "properties": {
                "primary": true
              },
              "id": "[resourceId('Microsoft.Network/networkInterfaces', variables('UntrustedNIC'))]"
            },
            {
              "properties": {
                "primary": false
              },
              "id": "[resourceId('Microsoft.Network/networkInterfaces', variables('TrustedNIC'))]"
              }
          ]
        }
      }
    },
    {
      "name": "[variables('UntrustedNIC')]",
      "type": "Microsoft.Network/networkInterfaces",
      "apiVersion": "2017-06-01",
      "location": "[variables('location')]",
      "comments": "This will be your Primary NIC Untrusted",
      "dependsOn": [
        "[variables('publicIpAddressName')]",
        "[variables('networkSecurityGroupName')]"
      ],
      "properties": {
        "enableIPForwarding": true,
        "networkSecurityGroup": {
          "id": "[resourceId('Microsoft.Network/networkSecurityGroups', variables('networkSecurityGroupName'))]"
          },
        "ipConfigurations": [
          {
            "name": "ipconfig1",
            "properties": {
              "subnet": {
                "id": "[variables('subnet1Ref')]"
              },
              "privateIPAllocationMethod": "Dynamic",
              "publicIpAddress": {
                "id": "[resourceId('Microsoft.Network/publicIpAddresses', variables('publicIpAddressName'))]"
              }
            }
          }
        ]
      }
    },
    {
      "name": "[variables('TrustedNIC')]",
      "type": "Microsoft.Network/networkInterfaces",
      "apiVersion": "2017-06-01",
      "location": "[variables('location')]",
      "comments": "This will be your NIC2 Trusted",
      "dependsOn": [
        "[variables('networkSecurityGroupName')]"
      ],          
      "properties": {
        "enableIPForwarding": true,
        "networkSecurityGroup": {
          "id": "[resourceId('Microsoft.Network/networkSecurityGroups', variables('networkSecurityGroupName'))]"
          },
        "ipConfigurations": [
          {
            "name": "ipconfig1",
            "properties": {
              "subnet": {
                "id": "[variables('subnet2Ref')]"
              },
              "privateIPAllocationMethod": "Dynamic"
            }
          }
        ]
       }
      },
    {
      "name": "[variables('publicIpAddressName')]",
      "type": "Microsoft.Network/publicIPAddresses",
      "apiVersion": "2020-07-01",
      "location": "[variables('location')]",
      "comments": "Public IP for your WAN NIC",
      "sku": {
        "name": "[parameters('PublicIPAddressSku')]",
        "tier": "Regional"
      },
      "properties": {
        "publicIPAllocationMethod": "Static"
      }
    },
{
      "name": "[variables('networkSecurityGroupName')]",
      "type": "Microsoft.Network/networkSecurityGroups",
      "apiVersion": "2016-09-01",
      "location": "[variables('location')]",
      "comments": "Network Security Group (NSG) for your Primary NIC",
      "properties": {
        "securityRules": [
          {
            "name": "In-Any",
            "properties": {
              "priority": 4096,
              "sourceAddressPrefix": "*",
              "protocol": "*",
              "destinationPortRange": "*",
              "access": "Allow",
              "direction": "Inbound",
              "sourcePortRange": "*",
              "destinationAddressPrefix": "*"
            }
          },
          {
            "name": "Out-Any",
            "properties": {
            "priority": 4096,
            "sourceAddressPrefix": "*",
            "protocol": "*",
            "destinationPortRange": "*",
            "access": "Allow",
            "direction": "Outbound",
            "sourcePortRange": "*",
            "destinationAddressPrefix": "*"
              }  
          }
        ]
      }
    },
    {
      "type": "Microsoft.Compute/virtualMachines/extensions",
      "name": "[concat(parameters('virtualMachineName'), '/', variables('extensionName'))]",
      "apiVersion": "2015-06-15",
      "location": "[variables('location')]",
      "dependsOn": [
        "[concat('Microsoft.Compute/virtualMachines/', parameters('virtualMachineName'))]"
      ],
      "properties": {
        "publisher": "Microsoft.OSTCExtensions",
        "type": "CustomScriptForLinux",
        "typeHandlerVersion": "1.4",
        "autoUpgradeMinorVersion": false,
        "settings": {
          "fileUris": [
            "[concat(parameters('OPNScriptURI'),parameters('ShellScriptName'))]" 
            ],
          "commandToExecute": "[concat('sh ',parameters('ShellScriptName'),' ',parameters('OPNConfigFile'))]" 
        }        
      }
    }
  ],
  "outputs": {}
}