Modifications apportées au dossier des vagrantfiles, ainsi qu'au

vagrantfile template.
Légère mise à jour du dépôt.
2025-02-07 08:23:01 +01:00 · 2025-01-23 09:30:34 +01:00 · 2024-12-13 10:00:04 +01:00 · 2024-11-29 11:44:18 +01:00 · 2024-11-29 11:42:24 +01:00 · 2024-11-28 12:02:52 +01:00
298 changed files with 48765 additions and 28 deletions
--- a/README.md
+++ b/README.md
@ -1,5 +1,5 @@
-Dépôt de fichiers personnels provenant de machines virtuelles utilisées en TP.
+# siotp

-Ce Gitea contient aussi un script d'automatisation du processus de push et de pull, adaptés aux deux branches.
+## Dépôt de fichiers personnels provenant de machines virtuelles utilisées en TP. Ce Gitea contient aussi un script d'automatisation du processus de push et de pull, adaptés aux deux branches.

-Dépôt anciennement privé, devenu public le 16 Septembre 2024.
+*Dépôt anciennement privé, devenu public le 16 Septembre 2024.*
--- a/automate.sh
+++ b/automate.sh
@ -4,6 +4,7 @@
 # Ajout d'un système de choix
 # Ajout d'un export de proxy HTTP/HTTPS automatique vers ceux du lycée pour la machine en salle 214.
 # Ajout d'un système de gestion d'erreur très basique pour éviter qu'un push/un pull se produise en cas de réponses incorrectes.
+# Suppression des derniers vestiges de l'existence d'une branche autre que 'main'

 export http_proxy="http://10.121.38.1:8080/"
 export https_proxy="http://10.121.38.1:8080/"
@ -12,12 +13,10 @@ echo "Voulez-vous récupérer les fichiers du dépôt ou effectuer un push sur l
 read answer

 if [ $answer == 1 ] ; then
-	git checkout main
 	echo "Récupération des fichiers à jour, branche main..."
 	git pull -q origin main
 	echo "Fichiers à jour récupérés."
 else
-	git checkout main
 	echo "Ajout des fichiers au Gitea..."
 	sleep 1
 	git add .
--- a/bts_annee_2/README.md
+++ b/bts_annee_2/README.md
@ -1,2 +1,6 @@
-Dépôt de seconde année de BTS.
-Un répertoire est dédié au côté SISR, un autre est dédié au côté Cybersécurité.
+## Dépôt de seconde année de BTS.
+### Le premier répertoire est dédié au côté SISR des TPs. 
+### Le deuxième répertoire est dédié au côté Cybersécurité des TPs.
+### Le troisième répertoire est dédié aux ateliers de professionalisation, mais les effectifs du BTS font que le seul présent (SDIS 29) sera le dernier en mode "piscine".
+### Le quatrième répertoire est dédié aux Vagrantfiles utilisés lors des TPs, que ce soit en cybersécurité ou en SISR.
+### Le cinquième répertoire est dédié au contrôle sur les logs, tel qu'il a été rendu.
--- a/bts_annee_2/ateliers_professionalisation/README.md
+++ b/bts_annee_2/ateliers_professionalisation/README.md
@ -0,0 +1,5 @@
+# Dépôt de fichiers et du travail de l'AP3-SDIS-29
+
+Ce dépôt contient les documents et scripts, fichiers de configuration et *playbooks* Ansible ayant étés élaborés lors de l'atelier de professionalisation 3, concernant le SDIS-29 comme sujet.
+Le SDIS-29 est, si on vulgarise, les sapeurs-pompiers du Finistère.
+**Chaque dossier porte un nom explicite, en rapport à ce qu'il contient.**
--- a/bts_annee_2/ateliers_professionalisation/ansible_bdd/README.md
+++ b/bts_annee_2/ateliers_professionalisation/ansible_bdd/README.md
--- a/bts_annee_2/ateliers_professionalisation/ansible_bdd/apbase.yml
+++ b/bts_annee_2/ateliers_professionalisation/ansible_bdd/apbase.yml
--- a/bts_annee_2/ateliers_professionalisation/ansible_bdd/apdb.yml
+++ b/bts_annee_2/ateliers_professionalisation/ansible_bdd/apdb.yml
--- a/bts_annee_2/ateliers_professionalisation/ansible_bdd/apdbdump.yml
+++ b/bts_annee_2/ateliers_professionalisation/ansible_bdd/apdbdump.yml
--- a/bts_annee_2/ateliers_professionalisation/ansible_bdd/hosts
+++ b/bts_annee_2/ateliers_professionalisation/ansible_bdd/hosts
--- a/bts_annee_2/ateliers_professionalisation/ansible_wireguard/README.md
+++ b/bts_annee_2/ateliers_professionalisation/ansible_wireguard/README.md
--- a/bts_annee_2/ateliers_professionalisation/ansible_wireguard/config_files/wg0-mon.conf
+++ b/bts_annee_2/ateliers_professionalisation/ansible_wireguard/config_files/wg0-mon.conf
--- a/bts_annee_2/ateliers_professionalisation/ansible_wireguard/config_files/wg0-prod.conf
+++ b/bts_annee_2/ateliers_professionalisation/ansible_wireguard/config_files/wg0-prod.conf
--- a/bts_annee_2/ateliers_professionalisation/ansible_wireguard/config_files/wg0-test.conf
+++ b/bts_annee_2/ateliers_professionalisation/ansible_wireguard/config_files/wg0-test.conf
--- a/bts_annee_2/ateliers_professionalisation/ansible_wireguard/hosts
+++ b/bts_annee_2/ateliers_professionalisation/ansible_wireguard/hosts
--- a/bts_annee_2/ateliers_professionalisation/ansible_wireguard/mkwgconf-p2p.sh
+++ b/bts_annee_2/ateliers_professionalisation/ansible_wireguard/mkwgconf-p2p.sh
--- a/bts_annee_2/ateliers_professionalisation/ansible_wireguard/wg.yml
+++ b/bts_annee_2/ateliers_professionalisation/ansible_wireguard/wg.yml
--- a/bts_annee_2/ateliers_professionalisation/documentation/README.md
+++ b/bts_annee_2/ateliers_professionalisation/documentation/README.md
--- a/bts_annee_2/ateliers_professionalisation/documentation/README_docu.md
+++ b/bts_annee_2/ateliers_professionalisation/documentation/README_docu.md
--- a/bts_annee_2/ateliers_professionalisation/scripts_logs/README.md
+++ b/bts_annee_2/ateliers_professionalisation/scripts_logs/README.md
--- a/bts_annee_2/ateliers_professionalisation/scripts_logs/journald-rcv.sh
+++ b/bts_annee_2/ateliers_professionalisation/scripts_logs/journald-rcv.sh
--- a/bts_annee_2/ateliers_professionalisation/scripts_logs/journald-snd.sh
+++ b/bts_annee_2/ateliers_professionalisation/scripts_logs/journald-snd.sh
--- a/bts_annee_2/ateliers_professionalisation/scripts_zabbix/README.md
+++ b/bts_annee_2/ateliers_professionalisation/scripts_zabbix/README.md
--- a/bts_annee_2/ateliers_professionalisation/scripts_zabbix/zabbix-install-client-prod.sh
+++ b/bts_annee_2/ateliers_professionalisation/scripts_zabbix/zabbix-install-client-prod.sh
--- a/bts_annee_2/ateliers_professionalisation/scripts_zabbix/zabbix-install-client-test.sh
+++ b/bts_annee_2/ateliers_professionalisation/scripts_zabbix/zabbix-install-client-test.sh
--- a/bts_annee_2/ateliers_professionalisation/scripts_zabbix/zabbix-install-server.sh
+++ b/bts_annee_2/ateliers_professionalisation/scripts_zabbix/zabbix-install-server.sh
--- a/bts_annee_2/cyber2/README.md
+++ b/bts_annee_2/cyber2/README.md
@ -1,2 +1,5 @@
-Dépôt de seconde année de Cybersécurité.
-Chaque dossier porte un nom descriptif, qu'on peut relier à une ou plusieurs séances.
+# Dépôt de seconde année de Cybersécurité.
+## Chaque dossier porte un nom descriptif, qu'on peut relier à une ou plusieurs séances.
+### Séances 12, 14 et 15 : OpenVPN, IPSec.
+### Séance 16 : Simulation de Ransomware.
+### Sécurité - Mise en pace d'une application Web sécurisée : Wordpress-LAMP.
--- a/bts_annee_2/cyber2/ransomware-simulation/README.md
+++ b/bts_annee_2/cyber2/ransomware-simulation/README.md
@ -1,2 +1,3 @@
-Dossier avec le script utilisé pour simuler une attaque de ransomware sur un partage Samba accessible en écriture, avec un mot de passe et nom d'utilisateur connus.
-Les arguments passés après le nom du script sont utilisés plus tard et sont nécessaires.
+Séance sur la simulation d'un *ransomware* sur un partage de fichiers Samba.
+Le mode d'emploi du script est dans celui-ci.
+Pour générer une clé d'encryption/décryption, on peut faire ceci: `date | sha512sum > macle.txt`.
--- a/bts_annee_2/cyber2/ransomware-simulation/cle.txt
+++ b/bts_annee_2/cyber2/ransomware-simulation/cle.txt
@ -0,0 +1 @@
+f1822d2fe58daeadc88e0e4eef2f155fc3edd3713ff9a5d1e27696afd9231d905db51c98dcf0c6416658239b8d3b5893c5775ffd7941f769a78fcd684c5f9161
--- a/bts_annee_2/cyber2/ransomware-simulation/smbcc.sh
+++ b/bts_annee_2/cyber2/ransomware-simulation/smbcc.sh
@ -1,34 +1,40 @@
 #!/bin/bash
-# déclaration des variables
+
+# Usage :
+# bash smbcc.sh <chemin du partage Windows AVEC IP> <nom d'utilisateur/mot de passe> <action> <clé d'encryption>
+
+# Déclaration des variables.
 chemin=$1
 cred=$2
 action=$3
 ficcle=$4

-# récup du mot de passe et nom d'utilisateur
+# Récupération du nom d'utilisateur et du mot de passe.
 user=$(echo $cred| cut -d "/" -f1)
 pass=$(echo $cred| cut -d "/" -f2)

-# créa du répertoire et on monte dessus
-[[ -e /mnt/samba ]] || mkdir /mnt/samba
-mount.cifs -o "username=$user,password=$pass" "//${chemin}" /mnt/samba
+# Création du répertoire s'il n'existe pas, et montage du partage Samba dessus.
+[[ -e /tmp/samba ]] || mkdir /tmp/samba
+mount.cifs -o "username=$user,password=$pass" "//${chemin}" /tmp/samba

-# vérification d'erreurs
+# Première vérification d'erreurs.
 if [[ $? != 0 ]] ; then
-	rmdir /mnt/samba
+	echo "Erreur dans la commande mount.cifs, vérifiez les paramètres entrés."
+	rmdir /tmp/samba
 	exit 1
 fi

-# la commande ccrypt
-ccrypt "$action" -r -k $ficcle /mnt/samba
+# Commande ccrypt pour encrypter ou décrypter le répertoire avec le partage.
+ccrypt "$action" --recursive --key $ficcle /tmp/samba

-# vérification d'erreurs
+# Seconde vérification d'erreurs.
 if [[ $? != 0 ]] ; then
-	echo "ccrypt échoué, revérifie le script."
+	echo "Échec de ccrypt, veuillez relancer le script après avoir vérifié les paramètres."
+	umount /tmp/samba
 	exit 1
 fi

-# nettoyage et sortie, code 0
-umount /mnt/samba
-rmdir /mnt/samba
+# Nettoyage des directoires, et sortie du script avec le code 0.
+umount /tmp/samba
+rmdir /tmp/samba
 exit 0
--- a/bts_annee_2/cyber2/ransomware-simulation/test.txt
+++ b/bts_annee_2/cyber2/ransomware-simulation/test.txt
@ -0,0 +1 @@
+0d7b9fea61b5707ff8bf6da489a2638153e8c5d74d3bfab9a12dca6698da3ef61441cf86b819b166cae673efc97c99cb3ab8022c62774636f9e8fe18771a13db  -
--- a/bts_annee_2/ds_logs/README.md
+++ b/bts_annee_2/ds_logs/README.md
@ -0,0 +1 @@
+# Ce répertoire contient le DS sur les logs tel qu'il a été rendu, le fichier de l'historique bash, ainsi que les fichiers nécessaires pour le contrôle.
--- a/bts_annee_2/ds_logs/bash_history_ge
+++ b/bts_annee_2/ds_logs/bash_history_ge
--- a/bts_annee_2/ds_logs/ctrl-cybersec2.odt
+++ b/bts_annee_2/ds_logs/ctrl-cybersec2.odt
--- a/bts_annee_2/ds_logs/srv1/auth.log
+++ b/bts_annee_2/ds_logs/srv1/auth.log
--- a/bts_annee_2/ds_logs/srv1/fail2ban-client-status-sshd
+++ b/bts_annee_2/ds_logs/srv1/fail2ban-client-status-sshd
@ -0,0 +1,11 @@
+root@vpxyxt:~# fail2ban-client status sshd
+Status for the jail: sshd
+|- Filter
+|  |- Currently failed:	6
+|  |- Total failed:	127969
+|  `- File list:	/var/log/auth.log
+`- Actions
+   |- Currently banned:	3
+   |- Total banned:	14924
+   `- Banned IP list:	221.131.165.33 125.141.139.7 112.85.42.229
+
--- a/bts_annee_2/ds_logs/srv1/fail2ban.log
+++ b/bts_annee_2/ds_logs/srv1/fail2ban.log
--- a/bts_annee_2/ds_logs/srv1/last-reboot
+++ b/bts_annee_2/ds_logs/srv1/last-reboot
@ -0,0 +1,18 @@
+reboot   system boot  4.19.0-18-cloud- Thu Nov 11 23:30   still running
+reboot   system boot  4.19.0-18-cloud- Sun Oct 24 23:12 - 23:29 (18+01:17)
+reboot   system boot  4.19.0-17-cloud- Mon Aug 16 19:09 - 23:12 (69+04:02)
+reboot   system boot  4.19.0-17-cloud- Tue Aug  3 13:52 - 19:07 (13+05:14)
+reboot   system boot  4.19.0-17-cloud- Wed Jul 21 22:02 - 13:51 (12+15:48)
+reboot   system boot  4.19.0-17-cloud- Sat Jul 17 14:51 - 22:02 (4+07:10)
+reboot   system boot  4.19.0-17-cloud- Mon Jun 21 21:04 - 14:49 (25+17:45)
+reboot   system boot  4.19.0-16-cloud- Wed Apr 21 17:22 - 21:04 (61+03:41)
+reboot   system boot  4.19.0-16-cloud- Sun Mar 28 23:02 - 17:22 (23+18:20)
+reboot   system boot  4.19.0-14-cloud- Mon Mar  1 18:48 - 23:00 (27+03:11)
+reboot   system boot  4.19.0-14-cloud- Sat Feb  6 18:30 - 18:48 (23+00:17)
+reboot   system boot  4.19.0-9-cloud-a Fri Aug  7 11:12 - 18:30 (183+08:18)
+reboot   system boot  4.19.0-9-cloud-a Wed Jun 10 22:13 - 11:10 (57+12:56)
+reboot   system boot  4.19.0-9-cloud-a Sun May 10 21:26 - 22:13 (31+00:47)
+reboot   system boot  4.19.0-8-cloud-a Wed Apr 22 16:33 - 21:26 (18+04:52)
+reboot   system boot  4.19.0-5-cloud-a Wed Apr 22 14:33 - 16:33  (01:59)
+
+wtmp begins Wed Apr 22 14:32:29 2020
--- a/bts_annee_2/ds_logs/srv2/access.log
+++ b/bts_annee_2/ds_logs/srv2/access.log
--- a/bts_annee_2/ds_logs/srv2/error.log
+++ b/bts_annee_2/ds_logs/srv2/error.log
@ -0,0 +1,22 @@
+2022/01/06 01:10:37 [crit] 25928#25928: *193130 SSL_do_handshake() failed (SSL: error:141CF06C:SSL routines:tls_parse_ctos_key_share:bad key share) while SSL handshaking, client: 134.122.134.182, server: 0.0.0.0:443
+2022/01/06 04:52:51 [crit] 25928#25928: *193597 SSL_do_handshake() failed (SSL: error:141CF06C:SSL routines:tls_parse_ctos_key_share:bad key share) while SSL handshaking, client: 180.215.192.168, server: 0.0.0.0:443
+2022/01/06 05:05:07 [crit] 25928#25928: *193671 SSL_do_handshake() failed (SSL: error:141CF06C:SSL routines:tls_parse_ctos_key_share:bad key share) while SSL handshaking, client: 184.105.139.68, server: 0.0.0.0:443
+2022/01/06 07:48:51 [crit] 25928#25928: *193925 SSL_do_handshake() failed (SSL: error:141CF06C:SSL routines:tls_parse_ctos_key_share:bad key share) while SSL handshaking, client: 192.241.205.83, server: 0.0.0.0:443
+2022/01/06 16:29:13 [error] 25928#25928: *195335 FastCGI sent in stderr: "PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function submit_button() in /var/www/html/wordpress/wp-admin/includes/file.php:2269
+Stack trace:
+#0 /var/www/html/wordpress/wp-admin/includes/class-wp-upgrader-skin.php(136): request_filesystem_credentials('', 'ftpext', false, '/var/www/html/w...', Array, false)
+#1 /var/www/html/wordpress/wp-admin/includes/class-automatic-upgrader-skin.php(49): WP_Upgrader_Skin->request_filesystem_credentials(false, '/var/www/html/w...', false)
+#2 /var/www/html/wordpress/wp-admin/includes/class-wp-site-health-auto-updates.php(280): Automatic_Upgrader_Skin->request_filesystem_credentials(false, '/var/www/html/w...')
+#3 /var/www/html/wordpress/wp-admin/includes/class-wp-site-health-auto-updates.php(36): WP_Site_Health_Auto_Updates->test_check_wp_filesystem_method()
+#4 /var/www/html/wordpress/wp-admin/includes/class-wp-site-health.php(1704): WP_Site_Health_Auto_Updates->run_tests()
+#5 /var/www/html/wordpress/wp-includes/rest-api/endpoints/class-wp-rest-" while reading response header from upstream, client: 109.215.149.166, server: www.sasti-bfc.fr, request: "GET /wp-json/wp-site-health/v1/tests/background-updates?_locale=user HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php7.3-fpm.sock:", host: "www.sasti-bfc.fr", referrer: "https://www.sasti-bfc.fr/wp-admin/site-health.php"
+2022/01/06 16:31:41 [error] 25928#25928: *195357 FastCGI sent in stderr: "PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function submit_button() in /var/www/html/wordpress/wp-admin/includes/file.php:2269
+Stack trace:
+#0 /var/www/html/wordpress/wp-admin/includes/class-wp-upgrader-skin.php(136): request_filesystem_credentials('', 'ftpext', false, '/var/www/html/w...', Array, false)
+#1 /var/www/html/wordpress/wp-admin/includes/class-automatic-upgrader-skin.php(49): WP_Upgrader_Skin->request_filesystem_credentials(false, '/var/www/html/w...', false)
+#2 /var/www/html/wordpress/wp-admin/includes/class-wp-site-health-auto-updates.php(280): Automatic_Upgrader_Skin->request_filesystem_credentials(false, '/var/www/html/w...')
+#3 /var/www/html/wordpress/wp-admin/includes/class-wp-site-health-auto-updates.php(36): WP_Site_Health_Auto_Updates->test_check_wp_filesystem_method()
+#4 /var/www/html/wordpress/wp-admin/includes/class-wp-site-health.php(1704): WP_Site_Health_Auto_Updates->run_tests()
+#5 /var/www/html/wordpress/wp-includes/rest-api/endpoints/class-wp-rest-" while reading response header from upstream, client: 109.215.149.166, server: www.sasti-bfc.fr, request: "GET /wp-json/wp-site-health/v1/tests/background-updates?_locale=user HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php7.3-fpm.sock:", host: "www.sasti-bfc.fr", referrer: "https://www.sasti-bfc.fr/wp-admin/site-health.php"
+2022/01/06 17:29:59 [crit] 25928#25928: *195897 SSL_do_handshake() failed (SSL: error:141CF06C:SSL routines:tls_parse_ctos_key_share:bad key share) while SSL handshaking, client: 198.20.69.98, server: 0.0.0.0:443
+2022/01/06 23:36:59 [error] 25928#25928: *196755 directory index of "/var/www/html/wordpress/wp-admin/css/" is forbidden, client: 2.56.57.240, server: www.sasti-bfc.fr, request: "GET /wp-admin/css/ HTTP/1.1", host: "www.sasti-bfc.fr", referrer: "binance.com"
--- a/bts_annee_2/sisr2/README.md
+++ b/bts_annee_2/sisr2/README.md
@ -1,2 +1,8 @@
-Dépôt de seconde année de SISR.
-Chaque dossier porte un nom descriptif, qu'on peut relier à une ou plusieurs séances.
+# Dépôt de seconde année de SISR.
+## Chaque dossier porte un nom descriptif, qu'on peut relier à une ou plusieurs séances.
+### Séances 3 et 4 : Heartbeat, répartition de charge.
+### Séances 4 et 5 : Haproxy et LVS.
+### Séance 6 (PXE - Déploiement automatisé de machines) : Intel PXE.
+### Séances 13 et 14 : Scripts Python.
+### Séances 16, 17 et 18 : Playbooks Ansible.
+### Séance 27 : Netbox/IPAM.
--- a/bts_annee_2/sisr2/intel_pxe_boot/README.md
+++ b/bts_annee_2/sisr2/intel_pxe_boot/README.md
@ -1 +1 @@
-Fichiers de configuration de la cinquième séance de SISR, sur PXE et le Netboot.
+Fichiers de configuration de la sixième séance de SISR, sur PXE et le Netboot.
--- a/bts_annee_2/sisr2/netbox_IPAM/README.md
+++ b/bts_annee_2/sisr2/netbox_IPAM/README.md
@ -0,0 +1 @@
+Ce répertoire contient le script élaboré lors du TP sur NetBox, sur une machine Vagrant Docker. Il contient aussi le fichier .csv généré.
--- a/bts_annee_2/sisr2/netbox_IPAM/netbox.csv
+++ b/bts_annee_2/sisr2/netbox_IPAM/netbox.csv
@ -0,0 +1,163 @@
+address,status,dns_name
+10.121.32.2/24,active,pxcastel.sio.lan
+10.121.32.24/24,active,nas.sio.lan
+10.121.32.254/24,active,gws.sio.lan
+10.121.32.69/24,active,gw.sio.lan
+10.121.38.100/24,active,sio211-10.sio.lan
+10.121.38.101/24,active,sio211-11.sio.lan
+10.121.38.102/24,active,sio211-12.sio.lan
+10.121.38.10/24,active,depl.sio.lan
+10.121.38.103/24,active,sio211-13.sio.lan
+10.121.38.104/24,active,sio211-14.sio.lan
+10.121.38.105/24,active,sio211-15.sio.lan
+10.121.38.106/24,active,sio211-16.sio.lan
+10.121.38.11/24,active,px3.sio.lan
+10.121.38.120/24,active,sio214-00.sio.lan
+10.121.38.121/24,active,sio214-01.sio.lan
+10.121.38.122/24,active,sio214-02.sio.lan
+10.121.38.12/24,active,ansible.sio.lan
+10.121.38.123/24,active,sio214-03.sio.lan
+10.121.38.124/24,active,sio214-04.sio.lan
+10.121.38.1/24,active,proxy.sio.lan
+10.121.38.125/24,active,sio214-05.sio.lan
+10.121.38.126/24,active,sio214-06.sio.lan
+10.121.38.127/24,active,sio214-07.sio.lan
+10.121.38.128/24,active,sio214-08.sio.lan
+10.121.38.129/24,active,sio214-09.sio.lan
+10.121.38.130/24,active,sio214-10.sio.lan
+10.121.38.131/24,active,sio214-11.sio.lan
+10.121.38.132/24,active,sio214-12.sio.lan
+10.121.38.13/24,active,tpbdd.sio.lan
+10.121.38.133/24,active,sio214-13.sio.lan
+10.121.38.140/24,active,sio215-00.sio.lan
+10.121.38.141/24,active,sio215-01.sio.lan
+10.121.38.142/24,active,sio215-02.sio.lan
+10.121.38.14/24,active,wd.sio.lan
+10.121.38.143/24,active,sio215-03.sio.lan
+10.121.38.144/24,active,sio215-04.sio.lan
+10.121.38.145/24,active,sio215-05.sio.lan
+10.121.38.146/24,active,sio215-06.sio.lan
+10.121.38.147/24,active,sio215-07.sio.lan
+10.121.38.148/24,active,sio215-08.sio.lan
+10.121.38.149/24,active,sio215-09.sio.lan
+10.121.38.150/24,active,sio215-10.sio.lan
+10.121.38.151/24,active,sio215-11.sio.lan
+10.121.38.152/24,active,sio215-12.sio.lan
+10.121.38.15/24,active,store.sio.lan
+10.121.38.153/24,active,sio215-13.sio.lan
+10.121.38.154/24,active,sio215-14.sio.lan
+10.121.38.155/24,active,sio215-15.sio.lan
+10.121.38.156/24,active,sio215-16.sio.lan
+10.121.38.157/24,active,sio215-17.sio.lan
+10.121.38.158/24,active,sio216-05.sio.lan
+10.121.38.159/24,active,sio216-06.sio.lan
+10.121.38.160/24,active,sio216-07.sio.lan
+10.121.38.16/24,active,store2.sio.lan
+10.121.38.17/24,active,sionas.sio.lan
+10.121.38.18/24,active,docker.sio.lan
+10.121.38.19/24,active,elk.sio.lan
+10.121.38.20/24,active,wiki.sio.lan
+10.121.38.21/24,active,infra.sio.lan
+10.121.38.22/24,active,adguard.sio.lan
+10.121.38.2/24,active,px.sio.lan
+10.121.38.23/24,active,lp216.sio.lan
+10.121.38.24/24,active,ansible2.sio.lan
+10.121.38.25/24,active,rundeck.sio.lan
+10.121.38.253/24,active,gwlab.sio.lan
+10.121.38.26/24,active,lp211.sio.lan
+10.121.38.27/24,active,lp215.sio.lan
+10.121.38.28/24,active,lp246.sio.lan
+10.121.38.29/24,active,lp214.sio.lan
+10.121.38.31/24,active,stork.sio.lan
+10.121.38.32/24,active,gwsio2.sio.lan
+10.121.38.3/24,active,ubnd.sio.lan
+10.121.38.33/24,active,gwsio3.sio.lan
+10.121.38.34/24,active,gwsio4.sio.lan
+10.121.38.35/24,active,gwsio5.sio.lan
+10.121.38.36/24,active,pve2.sio.lan
+10.121.38.37/24,active,pve.sio.lan
+10.121.38.38/24,active,ntfy.sio.lan
+10.121.38.39/24,active,jenkins.sio.lan
+10.121.38.40/24,active,awx.sio.lan
+10.121.38.41/24,active,free.sio.lan
+10.121.38.42/24,active,free.sio.lan
+10.121.38.4/24,active,fog2.sio.lan
+10.121.38.43/24,active,free.sio.lan
+10.121.38.44/24,active,free.sio.lan
+10.121.38.45/24,active,free.sio.lan
+10.121.38.46/24,active,free.sio.lan
+10.121.38.48/24,active,free.sio.lan
+10.121.38.49/24,active,free.sio.lan
+10.121.38.51/24,active,ppe21p.sio.lan
+10.121.38.52/24,active,ppe22p.sio.lan
+10.121.38.5/24,active,fog.sio.lan
+10.121.38.53/24,active,ppe23p.sio.lan
+10.121.38.54/24,active,ppe24p.sio.lan
+10.121.38.55/24,active,ppe25p.sio.lan
+10.121.38.61/24,active,pxap31.sio.lan
+10.121.38.62/24,active,pxap32.sio.lan
+10.121.38.6/24,active,px2.sio.lan
+10.121.38.63/24,active,pxap33.sio.lan
+10.121.38.64/24,active,pxap34.sio.lan
+10.121.38.65/24,active,pxap35.sio.lan
+10.121.38.66/24,active,ap31prod.sio.lan
+10.121.38.67/24,active,ap31wiki.sio.lan
+10.121.38.68/24,active,ap32prod.sio.lan
+10.121.38.69/24,active,ap32wiki.sio.lan
+10.121.38.70/24,active,ap33prod.sio.lan
+10.121.38.71/24,active,ap33wiki.sio.lan
+10.121.38.72/24,active,ap34prod.sio.lan
+10.121.38.7/24,active,ns.sio.lan
+10.121.38.73/24,active,ap34wiki.sio.lan
+10.121.38.74/24,active,ap35prod.sio.lan
+10.121.38.75/24,active,ap35wiki.sio.lan
+10.121.38.76/24,active,ap21.sio.lan
+10.121.38.77/24,active,ap22.sio.lan
+10.121.38.78/24,active,ap23.sio.lan
+10.121.38.79/24,active,ap24.sio.lan
+10.121.38.80/24,active,ap25.sio.lan
+10.121.38.81/24,active,ap26.sio.lan
+10.121.38.8/24,active,bobi.sio.lan
+10.121.38.90/24,active,sio211-00.sio.lan
+10.121.38.91/24,active,sio211-01.sio.lan
+10.121.38.92/24,active,sio211-02.sio.lan
+10.121.38.9/24,active,icinga.sio.lan
+10.121.38.93/24,active,sio211-03.sio.lan
+10.121.38.94/24,active,sio211-04.sio.lan
+10.121.38.95/24,active,sio211-05.sio.lan
+10.121.38.96/24,active,sio211-06.sio.lan
+10.121.38.97/24,active,sio211-07.sio.lan
+10.121.38.98/24,active,sio211-08.sio.lan
+10.121.38.99/24,active,sio211-09.sio.lan
+172.16.0.100/24,active,ap31-prod.sio.lan
+172.16.0.101/24,active,ap31-test.sio.lan
+172.16.0.102/24,active,ap31-mon.sio.lan
+172.16.0.10/24,active,pxlab1.sio.lan
+172.16.0.103/24,active,ap31-wiki.sio.lan
+172.16.0.104/24,active,ap31-ans.sio.lan
+172.16.0.105/24,active,ap31-pt.sio.lan
+172.16.0.110/24,active,ap32-prod.sio.lan
+172.16.0.111/24,active,ap32-test.sio.lan
+172.16.0.112/24,active,ap32-mon.sio.lan
+172.16.0.11/24,active,pxlab2.sio.lan
+172.16.0.113/24,active,ap32-wiki.sio.lan
+172.16.0.114/24,active,ap32-ans.sio.lan
+172.16.0.115/24,active,ap32-pt.sio.lan
+172.16.0.120/24,active,ap33-prod.sio.lan
+172.16.0.121/24,active,ap33-test.sio.lan
+172.16.0.122/24,active,ap33-mon.sio.lan
+172.16.0.12/24,active,pxlab3.sio.lan
+172.16.0.123/24,active,ap33-wiki.sio.lan
+172.16.0.124/24,active,ap33-ans.sio.lan
+172.16.0.125/24,active,ap33-pt.sio.lan
+172.16.0.130/24,active,ap34-prod.sio.lan
+172.16.0.131/24,active,ap34-test.sio.lan
+172.16.0.132/24,active,ap34-mon.sio.lan
+172.16.0.133/24,active,ap34-wiki.sio.lan
+172.16.0.40/24,active,infralab.sio.lan
+172.16.0.60/24,active,ap43-test.sio.lan
+172.16.0.64/24,active,ap44-test.sio.lan
+172.16.0.65/24,active,ap42-git.sio.lan
+172.16.0.68/24,active,ap43-git.sio.lan
+172.16.0.86/24,active,ap42-test.sio.lan
+172.16.0.91/24,active,ap41-test.sio.lan
--- a/bts_annee_2/sisr2/netbox_IPAM/netbox.sh
+++ b/bts_annee_2/sisr2/netbox_IPAM/netbox.sh
@ -0,0 +1,2 @@
+#!/bin/bash
+host -l -ta sio.lan|awk 'BEGIN{ OFS=""; print "address,status,dns_name"} { print $4"/24,active,", $1 }'|sort -n > netbox.csv
--- a/bts_annee_2/vagrantfiles/ELK-apache/.vagrant/machines/default/virtualbox/action_provision
+++ b/bts_annee_2/vagrantfiles/ELK-apache/.vagrant/machines/default/virtualbox/action_provision
@ -0,0 +1 @@
+1.5:06f76826-1fc2-4258-8dfe-96c459866722
--- a/bts_annee_2/vagrantfiles/ELK-apache/.vagrant/machines/default/virtualbox/action_set_name
+++ b/bts_annee_2/vagrantfiles/ELK-apache/.vagrant/machines/default/virtualbox/action_set_name
@ -0,0 +1 @@
+1731948159
--- a/bts_annee_2/vagrantfiles/ELK-apache/.vagrant/machines/default/virtualbox/box_meta
+++ b/bts_annee_2/vagrantfiles/ELK-apache/.vagrant/machines/default/virtualbox/box_meta
@ -0,0 +1 @@
+{"name":"debian/bookworm64","version":"12.20240905.1","provider":"virtualbox","directory":"boxes/debian-VAGRANTSLASH-bookworm64/12.20240905.1/virtualbox"}
--- a/bts_annee_2/vagrantfiles/ELK-apache/.vagrant/machines/default/virtualbox/creator_uid
+++ b/bts_annee_2/vagrantfiles/ELK-apache/.vagrant/machines/default/virtualbox/creator_uid
@ -0,0 +1 @@
+1010
--- a/bts_annee_2/vagrantfiles/ELK-apache/.vagrant/machines/default/virtualbox/id
+++ b/bts_annee_2/vagrantfiles/ELK-apache/.vagrant/machines/default/virtualbox/id
@ -0,0 +1 @@
+06f76826-1fc2-4258-8dfe-96c459866722
--- a/bts_annee_2/vagrantfiles/ELK-apache/.vagrant/machines/default/virtualbox/index_uuid
+++ b/bts_annee_2/vagrantfiles/ELK-apache/.vagrant/machines/default/virtualbox/index_uuid
@ -0,0 +1 @@
+6f46c026f2c54b15bed0f349a03b0596
--- a/bts_annee_2/vagrantfiles/ELK-apache/.vagrant/machines/default/virtualbox/private_key
+++ b/bts_annee_2/vagrantfiles/ELK-apache/.vagrant/machines/default/virtualbox/private_key
@ -0,0 +1,8 @@
+-----BEGIN OPENSSH PRIVATE KEY-----
+b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAA
+AAtzc2gtZWQyNTUxOQAAACA56T1u5azsHtRFnK2l9RCAYtph5jlMFPRm2zCD
+9DZ5RQAAAJAnXU8FJ11PBQAAAAtzc2gtZWQyNTUxOQAAACA56T1u5azsHtRF
+nK2l9RCAYtph5jlMFPRm2zCD9DZ5RQAAAEDGU1kahUM5db/ZjlAPbZIZB/BJ
+IA7KgrlC/pypyAe5DnpPW7lrOwe1EWcraX1EIBi2mHmOUwU9GbbMIP0NnlF
+AAAAB3ZhZ3JhbnQBAgMEBQY=
+-----END OPENSSH PRIVATE KEY-----
--- a/bts_annee_2/vagrantfiles/ELK-apache/.vagrant/machines/default/virtualbox/synced_folders
+++ b/bts_annee_2/vagrantfiles/ELK-apache/.vagrant/machines/default/virtualbox/synced_folders
@ -0,0 +1 @@
+{"virtualbox":{"/vagrant":{"guestpath":"/vagrant","hostpath":"/home/guillaume.emorine/vagrant/ELK-apache","disabled":false,"__vagrantfile":true}}}
--- a/bts_annee_2/vagrantfiles/ELK-apache/.vagrant/machines/default/virtualbox/vagrant_cwd
+++ b/bts_annee_2/vagrantfiles/ELK-apache/.vagrant/machines/default/virtualbox/vagrant_cwd
@ -0,0 +1 @@
+/home/guillaume.emorine/vagrant/ELK-apache
--- a/bts_annee_2/vagrantfiles/ELK-apache/.vagrant/rgloader/loader.rb
+++ b/bts_annee_2/vagrantfiles/ELK-apache/.vagrant/rgloader/loader.rb
@ -0,0 +1,12 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
+# This file loads the proper rgloader/loader.rb file that comes packaged
+# with Vagrant so that encoded files can properly run with Vagrant.
+
+if ENV["VAGRANT_INSTALLER_EMBEDDED_DIR"]
+  require File.expand_path(
+    "rgloader/loader", ENV["VAGRANT_INSTALLER_EMBEDDED_DIR"])
+else
+  raise "Encoded files can't be read outside of the Vagrant installer."
+end
--- a/bts_annee_2/vagrantfiles/ELK-apache/Vagrantfile
+++ b/bts_annee_2/vagrantfiles/ELK-apache/Vagrantfile
@ -0,0 +1,49 @@
+ # -*- mode: ruby -*-
+# vi: set ft=ruby :
+
+# All Vagrant configuration is done below. The "2" in Vagrant.configure
+# configures the configuration version (we support older styles for
+# backwards compatibility). Please don't change it unless you know what
+# you're doing.
+Vagrant.configure("2") do |config|
+  # The most common configuration options are documented and commented below.
+  # For a complete reference, please see the online documentation at
+  # https://docs.vagrantup.com.
+
+  # Every Vagrant development environment requires a box. You can search for
+  # boxes at https://vagrantcloud.com/search.
+  config.vm.box = "debian/bookworm64"
+  config.vm.hostname = "elk-apache"
+
+  # Disable automatic box update checking. If you disable this, then
+  # boxes will only be checked for updates when the user runs
+  # `vagrant box outdated`. This is not recommended.
+  # config.vm.box_check_update = false
+
+  # Create a public network, which generally matched to bridged network.
+  # Bridged networks make the machine appear as another physical device on
+  # your network.
+  config.vm.network "public_network"
+
+   config.vm.provider "virtualbox" do |vb|
+  #   # Display the VirtualBox GUI when booting the machine
+  #   vb.gui = true
+  #
+  #   # Customize the amount of memory on the VM:
+     vb.memory = "1024"
+   end
+  #
+  # View the documentation for the provider you are using for more
+  # information on available options.
+
+  # Enable provisioning with a shell script. Additional provisioners such as
+  # Ansible, Chef, Docker, Puppet and Salt are also available. Please see the
+  # documentation for more information about their specific syntax and use.
+   config.vm.provision "shell", inline: <<-SHELL
+     timedatectl set-timezone Europe/Paris
+     apt-get update
+     apt-get install -y vim curl wget git 
+     curl -L -O https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-8.16.0-amd64.deb
+     sudo dpkg -i filebeat-8.16.0-amd64.deb
+   SHELL
+end
--- a/bts_annee_2/vagrantfiles/ELK-gwsio/.vagrant/machines/default/virtualbox/action_provision
+++ b/bts_annee_2/vagrantfiles/ELK-gwsio/.vagrant/machines/default/virtualbox/action_provision
@ -0,0 +1 @@
+1.5:3fa2b880-a2c9-40fb-a746-93070feb6be9
--- a/bts_annee_2/vagrantfiles/ELK-gwsio/.vagrant/machines/default/virtualbox/action_set_name
+++ b/bts_annee_2/vagrantfiles/ELK-gwsio/.vagrant/machines/default/virtualbox/action_set_name
@ -0,0 +1 @@
+1732176780
--- a/bts_annee_2/vagrantfiles/ELK-gwsio/.vagrant/machines/default/virtualbox/box_meta
+++ b/bts_annee_2/vagrantfiles/ELK-gwsio/.vagrant/machines/default/virtualbox/box_meta
@ -0,0 +1 @@
+{"name":"debian/bookworm64","version":"12.20240905.1","provider":"virtualbox","directory":"boxes/debian-VAGRANTSLASH-bookworm64/12.20240905.1/virtualbox"}
--- a/bts_annee_2/vagrantfiles/ELK-gwsio/.vagrant/machines/default/virtualbox/creator_uid
+++ b/bts_annee_2/vagrantfiles/ELK-gwsio/.vagrant/machines/default/virtualbox/creator_uid
@ -0,0 +1 @@
+1010
--- a/bts_annee_2/vagrantfiles/ELK-gwsio/.vagrant/machines/default/virtualbox/id
+++ b/bts_annee_2/vagrantfiles/ELK-gwsio/.vagrant/machines/default/virtualbox/id
@ -0,0 +1 @@
+3fa2b880-a2c9-40fb-a746-93070feb6be9
--- a/bts_annee_2/vagrantfiles/ELK-gwsio/.vagrant/machines/default/virtualbox/index_uuid
+++ b/bts_annee_2/vagrantfiles/ELK-gwsio/.vagrant/machines/default/virtualbox/index_uuid
@ -0,0 +1 @@
+964b49aa565f4ecca1c96de472a76304
--- a/bts_annee_2/vagrantfiles/ELK-gwsio/.vagrant/machines/default/virtualbox/private_key
+++ b/bts_annee_2/vagrantfiles/ELK-gwsio/.vagrant/machines/default/virtualbox/private_key
@ -0,0 +1,8 @@
+-----BEGIN OPENSSH PRIVATE KEY-----
+b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAA
+AAtzc2gtZWQyNTUxOQAAACA0CChkxi/CkQIH42AhnodwCuwzYgi1y/mjnu5X
+bHm7hgAAAJBVfnocVX56HAAAAAtzc2gtZWQyNTUxOQAAACA0CChkxi/CkQIH
+42AhnodwCuwzYgi1y/mjnu5XbHm7hgAAAEAYF/eC87pVaFYPq980N8iPNlsl
+JpRgAvnEgSmOiW6s2jQIKGTGL8KRAgfjYCGeh3AK7DNiCLXL+aOe7ldsebuG
+AAAAB3ZhZ3JhbnQBAgMEBQY=
+-----END OPENSSH PRIVATE KEY-----
--- a/bts_annee_2/vagrantfiles/ELK-gwsio/.vagrant/machines/default/virtualbox/synced_folders
+++ b/bts_annee_2/vagrantfiles/ELK-gwsio/.vagrant/machines/default/virtualbox/synced_folders
@ -0,0 +1 @@
+{"virtualbox":{"/vagrant":{"guestpath":"/vagrant","hostpath":"/home/guillaume.emorine/vagrant/ELK-gwsio","disabled":false,"__vagrantfile":true}}}
--- a/bts_annee_2/vagrantfiles/ELK-gwsio/.vagrant/machines/default/virtualbox/vagrant_cwd
+++ b/bts_annee_2/vagrantfiles/ELK-gwsio/.vagrant/machines/default/virtualbox/vagrant_cwd
@ -0,0 +1 @@
+/home/guillaume.emorine/vagrant/ELK-gwsio
--- a/bts_annee_2/vagrantfiles/ELK-gwsio/.vagrant/rgloader/loader.rb
+++ b/bts_annee_2/vagrantfiles/ELK-gwsio/.vagrant/rgloader/loader.rb
@ -0,0 +1,12 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
+# This file loads the proper rgloader/loader.rb file that comes packaged
+# with Vagrant so that encoded files can properly run with Vagrant.
+
+if ENV["VAGRANT_INSTALLER_EMBEDDED_DIR"]
+  require File.expand_path(
+    "rgloader/loader", ENV["VAGRANT_INSTALLER_EMBEDDED_DIR"])
+else
+  raise "Encoded files can't be read outside of the Vagrant installer."
+end
--- a/bts_annee_2/vagrantfiles/ELK-gwsio/Vagrantfile
+++ b/bts_annee_2/vagrantfiles/ELK-gwsio/Vagrantfile
@ -0,0 +1,51 @@
+ # -*- mode: ruby -*-
+# vi: set ft=ruby :
+
+# All Vagrant configuration is done below. The "2" in Vagrant.configure
+# configures the configuration version (we support older styles for
+# backwards compatibility). Please don't change it unless you know what
+# you're doing.
+Vagrant.configure("2") do |config|
+  # The most common configuration options are documented and commented below.
+  # For a complete reference, please see the online documentation at
+  # https://docs.vagrantup.com.
+
+  # Every Vagrant development environment requires a box. You can search for
+  # boxes at https://vagrantcloud.com/search.
+  config.vm.box = "debian/bookworm64"
+  config.vm.hostname = "elk-cli"
+
+  # Disable automatic box update checking. If you disable this, then
+  # boxes will only be checked for updates when the user runs
+  # `vagrant box outdated`. This is not recommended.
+  # config.vm.box_check_update = false
+
+  # Create a public network, which generally matched to bridged network.
+  # Bridged networks make the machine appear as another physical device on
+  # your network.
+  config.vm.network "public_network"
+
+   config.vm.provider "virtualbox" do |vb|
+  #   # Display the VirtualBox GUI when booting the machine
+  #   vb.gui = true
+  #
+  #   # Customize the amount of memory on the VM:
+     vb.memory = "1024"
+   end
+  #
+  # View the documentation for the provider you are using for more
+  # information on available options.
+
+  # Enable provisioning with a shell script. Additional provisioners such as
+  # Ansible, Chef, Docker, Puppet and Salt are also available. Please see the
+  # documentation for more information about their specific syntax and use.
+   config.vm.provision "shell", inline: <<-SHELL
+     timedatectl set-timezone Europe/Paris
+     apt-get update
+     apt-get install -y vim curl wget git 
+     curl -L -O https://artifacts.elastic.co/downloads/beats/auditbeat/auditbeat-8.16.0-amd64.deb
+     sudo dpkg -i auditbeat-8.16.0-amd64.deb
+     curl -L -O https://artifacts.elastic.co/downloads/beats/heartbeat/heartbeat-8.16.0-amd64.deb
+     sudo dpkg -i heartbeat-8.16.0-amd64.deb
+   SHELL
+end
--- a/bts_annee_2/vagrantfiles/ELK/.vagrant/machines/default/virtualbox/action_provision
+++ b/bts_annee_2/vagrantfiles/ELK/.vagrant/machines/default/virtualbox/action_provision
@ -0,0 +1 @@
+1.5:da9d05b5-c1ba-4981-b9d0-d15e9c71cc2f
--- a/bts_annee_2/vagrantfiles/ELK/.vagrant/machines/default/virtualbox/action_set_name
+++ b/bts_annee_2/vagrantfiles/ELK/.vagrant/machines/default/virtualbox/action_set_name
@ -0,0 +1 @@
+1731946979
--- a/bts_annee_2/vagrantfiles/ELK/.vagrant/machines/default/virtualbox/box_meta
+++ b/bts_annee_2/vagrantfiles/ELK/.vagrant/machines/default/virtualbox/box_meta
@ -0,0 +1 @@
+{"name":"debian/bookworm64","version":"12.20240905.1","provider":"virtualbox","directory":"boxes/debian-VAGRANTSLASH-bookworm64/12.20240905.1/virtualbox"}
--- a/bts_annee_2/vagrantfiles/ELK/.vagrant/machines/default/virtualbox/creator_uid
+++ b/bts_annee_2/vagrantfiles/ELK/.vagrant/machines/default/virtualbox/creator_uid
@ -0,0 +1 @@
+1010
--- a/bts_annee_2/vagrantfiles/ELK/.vagrant/machines/default/virtualbox/id
+++ b/bts_annee_2/vagrantfiles/ELK/.vagrant/machines/default/virtualbox/id
@ -0,0 +1 @@
+da9d05b5-c1ba-4981-b9d0-d15e9c71cc2f
--- a/bts_annee_2/vagrantfiles/ELK/.vagrant/machines/default/virtualbox/index_uuid
+++ b/bts_annee_2/vagrantfiles/ELK/.vagrant/machines/default/virtualbox/index_uuid
@ -0,0 +1 @@
+5bc5bb7bcf2e4160a2a26dd9411f1e09
--- a/bts_annee_2/vagrantfiles/ELK/.vagrant/machines/default/virtualbox/private_key
+++ b/bts_annee_2/vagrantfiles/ELK/.vagrant/machines/default/virtualbox/private_key
@ -0,0 +1,8 @@
+-----BEGIN OPENSSH PRIVATE KEY-----
+b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAA
+AAtzc2gtZWQyNTUxOQAAACDX7e5ukFya9Yx4i9kHfXcx+754EBXmDu+6YGoy
+vy+jigAAAJAWItrYFiLa2AAAAAtzc2gtZWQyNTUxOQAAACDX7e5ukFya9Yx4
+i9kHfXcx+754EBXmDu+6YGoyvy+jigAAAEDGMKSYhm0i7YbEvkaysKBm4F3q
+YzL2BqTBfk/sn620bNft7m6QXJr1jHiL2Qd9dzH7vngQFeYO77pgajK/L6OK
+AAAAB3ZhZ3JhbnQBAgMEBQY=
+-----END OPENSSH PRIVATE KEY-----
--- a/bts_annee_2/vagrantfiles/ELK/.vagrant/machines/default/virtualbox/synced_folders
+++ b/bts_annee_2/vagrantfiles/ELK/.vagrant/machines/default/virtualbox/synced_folders
@ -0,0 +1 @@
+{"virtualbox":{"/vagrant":{"guestpath":"/vagrant","hostpath":"/home/guillaume.emorine/vagrant/ELK","disabled":false,"__vagrantfile":true}}}
--- a/bts_annee_2/vagrantfiles/ELK/.vagrant/machines/default/virtualbox/vagrant_cwd
+++ b/bts_annee_2/vagrantfiles/ELK/.vagrant/machines/default/virtualbox/vagrant_cwd
@ -0,0 +1 @@
+/home/guillaume.emorine/vagrant/ELK
--- a/bts_annee_2/vagrantfiles/ELK/.vagrant/rgloader/loader.rb
+++ b/bts_annee_2/vagrantfiles/ELK/.vagrant/rgloader/loader.rb
@ -0,0 +1,12 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
+# This file loads the proper rgloader/loader.rb file that comes packaged
+# with Vagrant so that encoded files can properly run with Vagrant.
+
+if ENV["VAGRANT_INSTALLER_EMBEDDED_DIR"]
+  require File.expand_path(
+    "rgloader/loader", ENV["VAGRANT_INSTALLER_EMBEDDED_DIR"])
+else
+  raise "Encoded files can't be read outside of the Vagrant installer."
+end
--- a/bts_annee_2/vagrantfiles/ELK/Vagrantfile
+++ b/bts_annee_2/vagrantfiles/ELK/Vagrantfile
@ -0,0 +1,50 @@
+ # -*- mode: ruby -*-
+# vi: set ft=ruby :
+
+# All Vagrant configuration is done below. The "2" in Vagrant.configure
+# configures the configuration version (we support older styles for
+# backwards compatibility). Please don't change it unless you know what
+# you're doing.
+Vagrant.configure("2") do |config|
+  # The most common configuration options are documented and commented below.
+  # For a complete reference, please see the online documentation at
+  # https://docs.vagrantup.com.
+
+  # Every Vagrant development environment requires a box. You can search for
+  # boxes at https://vagrantcloud.com/search.
+  config.vm.box = "debian/bookworm64"
+  config.vm.hostname = "elk"
+
+  # Disable automatic box update checking. If you disable this, then
+  # boxes will only be checked for updates when the user runs
+  # `vagrant box outdated`. This is not recommended.
+  # config.vm.box_check_update = false
+
+  # Create a public network, which generally matched to bridged network.
+  # Bridged networks make the machine appear as another physical device on
+  # your network.
+  config.vm.network "public_network"
+
+   config.vm.provider "virtualbox" do |vb|
+  #   # Display the VirtualBox GUI when booting the machine
+  #   vb.gui = true
+  #
+  #   # Customize the amount of memory on the VM:
+     vb.memory = "4096"
+   end
+  #
+  # View the documentation for the provider you are using for more
+  # information on available options.
+
+  # Enable provisioning with a shell script. Additional provisioners such as
+  # Ansible, Chef, Docker, Puppet and Salt are also available. Please see the
+  # documentation for more information about their specific syntax and use.
+   config.vm.provision "shell", inline: <<-SHELL
+     timedatectl set-timezone Europe/Paris
+     apt-get update
+     apt-get install -y vim curl wget git 
+     curl -fsSL get.docker.com -o get-docker.sh && sh get-docker.sh
+     git clone https://github.com/deviantony/docker-elk.git
+     ip -br a
+   SHELL
+end
--- a/bts_annee_2/vagrantfiles/README.md
+++ b/bts_annee_2/vagrantfiles/README.md
@ -0,0 +1,2 @@
+# Ce répertoire contient les vagrantfiles et répertoires de celles-ci utilisés lors de TPs et des séances, que ce soit en SISR ou en Cyber.
+Le fichier Vagrantfile dans la racine est une base "universelle" qu'il faut modifier en fonction des besoins.
--- a/bts_annee_2/vagrantfiles/Vagrantfile
+++ b/bts_annee_2/vagrantfiles/Vagrantfile
@ -0,0 +1,79 @@
+# -*- mode: ruby -*-
+# vi: set ft=ruby :
+ 
+# All Vagrant configuration is done below. The "2" in Vagrant.configure
+# configures the configuration version (we support older styles for
+# backwards compatibility). Please don't change it unless you know what
+# you're doing.
+Vagrant.configure("2") do |config|
+  # The most common configuration options are documented and commented below.
+  # For a complete reference, please see the online documentation at
+  # https://docs.vagrantup.com.
+ 
+  # Every Vagrant development environment requires a box. You can search for
+  # boxes at https://vagrantcloud.com/search.
+  config.vm.box = "remplacer"
+  config.vm.hostname = "renommer"
+ 
+  # Disable automatic box update checking. If you disable this, then
+  # boxes will only be checked for updates when the user runs
+  # `vagrant box outdated`. This is not recommended.
+  # config.vm.box_check_update = false
+ 
+  # Create a forwarded port mapping which allows access to a specific port
+  # within the machine from a port on the host machine. In the example below,
+  # accessing "localhost:8080" will access port 80 on the guest machine.
+  # NOTE: This will enable public access to the opened port
+  # config.vm.network "forwarded_port", guest: 80, host: 8080
+ 
+  # Create a forwarded port mapping which allows access to a specific port
+  # within the machine from a port on the host machine and only allow access
+  # via 127.0.0.1 to disable public access
+  # config.vm.network "forwarded_port", guest: 80, host: 8080, host_ip: "127.0.0.1"
+ 
+  # Create a private network, which allows host-only access to the machine
+  # using a specific IP.
+  # config.vm.network "private_network", ip: "192.168.33.10"
+ 
+  # Create a public network, which generally matched to bridged network.
+  # Bridged networks make the machine appear as another physical device on
+  # your network.
+    config.vm.network "public_network"
+ 
+  # Share an additional folder to the guest VM. The first argument is
+  # the path on the host to the actual folder. The second argument is
+  # the path on the guest to mount the folder. And the optional third
+  # argument is a set of non-required options.
+  # config.vm.synced_folder "../data", "/vagrant_data"
+ 
+  # Disable the default share of the current code directory. Doing this
+  # provides improved isolation between the vagrant box and your host
+  # by making sure your Vagrantfile isn't accessable to the vagrant box.
+  # If you use this you may want to enable additional shared subfolders as
+  # shown above.
+  # config.vm.synced_folder ".", "/vagrant", disabled: true
+ 
+  # Provider-specific configuration so you can fine-tune various
+  # backing providers for Vagrant. These expose provider-specific options.
+  # Example for VirtualBox:
+  #
+    config.vm.provider "virtualbox" do |vb|
+      # Display the VirtualBox GUI when booting the machine
+      vb.gui = false
+   
+      # Customize the amount of memory on the VM:
+      vb.memory = "1024"
+    end
+  #
+  # View the documentation for the provider you are using for more
+  # information on available options.
+ 
+  # Enable provisioning with a shell script. Additional provisioners such as
+  # Ansible, Chef, Docker, Puppet and Salt are also available. Please see the
+  # documentation for more information about their specific syntax and use.
+   config.vm.provision "shell", inline: <<-SHELL
+     timedatectl set-timezone Europe/Paris
+     apt-get update
+     apt-get install -y vim wget curl neovim mc git neofetch
+   SHELL
+end
--- a/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/infra/virtualbox/action_provision
+++ b/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/infra/virtualbox/action_provision
@ -0,0 +1 @@
+1.5:5dcd482c-250c-4730-bc1d-091de6611d5f
--- a/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/infra/virtualbox/action_set_name
+++ b/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/infra/virtualbox/action_set_name
@ -0,0 +1 @@
+1728551491
--- a/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/infra/virtualbox/box_meta
+++ b/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/infra/virtualbox/box_meta
@ -0,0 +1 @@
+{"name":"debian/bookworm64","version":"12.20240905.1","provider":"virtualbox","directory":"boxes/debian-VAGRANTSLASH-bookworm64/12.20240905.1/virtualbox"}
--- a/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/infra/virtualbox/creator_uid
+++ b/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/infra/virtualbox/creator_uid
@ -0,0 +1 @@
+1010
--- a/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/infra/virtualbox/id
+++ b/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/infra/virtualbox/id
@ -0,0 +1 @@
+5dcd482c-250c-4730-bc1d-091de6611d5f
--- a/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/infra/virtualbox/index_uuid
+++ b/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/infra/virtualbox/index_uuid
@ -0,0 +1 @@
+10538b64d9204dedbe2d3cfb6d1f23b5
--- a/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/infra/virtualbox/private_key
+++ b/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/infra/virtualbox/private_key
@ -0,0 +1,8 @@
+-----BEGIN OPENSSH PRIVATE KEY-----
+b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAA
+AAtzc2gtZWQyNTUxOQAAACAX/r/n1n8QVb+OH4Jh7HAcAwYITlLoegFgqZTb
+jpwglwAAAJDgQ8t24EPLdgAAAAtzc2gtZWQyNTUxOQAAACAX/r/n1n8QVb+O
+H4Jh7HAcAwYITlLoegFgqZTbjpwglwAAAED4I26sTfRw0kziaX3fldTtyYVX
+50vuRjlGUKAtjDJ+mhf+v+fWfxBVv44fgmHscBwDBghOUuh6AWCplNuOnCCX
+AAAAB3ZhZ3JhbnQBAgMEBQY=
+-----END OPENSSH PRIVATE KEY-----
--- a/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/infra/virtualbox/synced_folders
+++ b/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/infra/virtualbox/synced_folders
@ -0,0 +1 @@
+{"virtualbox":{"/vagrant":{"guestpath":"/vagrant","hostpath":"/home/guillaume.emorine/vagrant/ansible","disabled":false,"__vagrantfile":true}}}
--- a/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/infra/virtualbox/vagrant_cwd
+++ b/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/infra/virtualbox/vagrant_cwd
@ -0,0 +1 @@
+/home/guillaume.emorine/vagrant/ansible
--- a/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/web1/virtualbox/action_provision
+++ b/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/web1/virtualbox/action_provision
@ -0,0 +1 @@
+1.5:910c1832-0419-4dcf-8dc4-d3bd9f63a17b
--- a/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/web1/virtualbox/action_set_name
+++ b/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/web1/virtualbox/action_set_name
@ -0,0 +1 @@
+1728551590
--- a/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/web1/virtualbox/box_meta
+++ b/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/web1/virtualbox/box_meta
@ -0,0 +1 @@
+{"name":"debian/bookworm64","version":"12.20240905.1","provider":"virtualbox","directory":"boxes/debian-VAGRANTSLASH-bookworm64/12.20240905.1/virtualbox"}
--- a/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/web1/virtualbox/creator_uid
+++ b/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/web1/virtualbox/creator_uid
@ -0,0 +1 @@
+1010
--- a/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/web1/virtualbox/id
+++ b/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/web1/virtualbox/id
@ -0,0 +1 @@
+910c1832-0419-4dcf-8dc4-d3bd9f63a17b
--- a/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/web1/virtualbox/index_uuid
+++ b/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/web1/virtualbox/index_uuid
@ -0,0 +1 @@
+a8aeea2a287e4d2eb848c4a6092cd98c
--- a/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/web1/virtualbox/private_key
+++ b/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/web1/virtualbox/private_key
@ -0,0 +1,8 @@
+-----BEGIN OPENSSH PRIVATE KEY-----
+b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAA
+AAtzc2gtZWQyNTUxOQAAACAsEDZQmbtkZProyiZ58INyJEJAWDpDWHSI6uq/
+40MOlgAAAJDQBA/70AQP+wAAAAtzc2gtZWQyNTUxOQAAACAsEDZQmbtkZPro
+yiZ58INyJEJAWDpDWHSI6uq/40MOlgAAAEBI3EikWq2VHqW/sWyA5J/MmQnB
+JH5MpvOee5YAmwEesCwQNlCZu2Rk+ujKJnnwg3IkQkBYOkNYdIjq6r/jQw6W
+AAAAB3ZhZ3JhbnQBAgMEBQY=
+-----END OPENSSH PRIVATE KEY-----
--- a/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/web1/virtualbox/synced_folders
+++ b/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/web1/virtualbox/synced_folders
@ -0,0 +1 @@
+{"virtualbox":{"/vagrant":{"guestpath":"/vagrant","hostpath":"/home/guillaume.emorine/vagrant/ansible","disabled":false,"__vagrantfile":true}}}
--- a/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/web1/virtualbox/vagrant_cwd
+++ b/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/web1/virtualbox/vagrant_cwd
@ -0,0 +1 @@
+/home/guillaume.emorine/vagrant/ansible
--- a/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/web2/virtualbox/action_provision
+++ b/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/web2/virtualbox/action_provision
@ -0,0 +1 @@
+1.5:4146cb5a-0500-4fe1-a61e-7b74ebb8714d
--- a/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/web2/virtualbox/action_set_name
+++ b/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/web2/virtualbox/action_set_name
@ -0,0 +1 @@
+1728551647
--- a/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/web2/virtualbox/box_meta
+++ b/bts_annee_2/vagrantfiles/ansible/.vagrant/machines/web2/virtualbox/box_meta
@ -0,0 +1 @@
+{"name":"debian/bookworm64","version":"12.20240905.1","provider":"virtualbox","directory":"boxes/debian-VAGRANTSLASH-bookworm64/12.20240905.1/virtualbox"}
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
Guillaume Emorine	6e55f7e8b6	Modifications apportées au dossier des vagrantfiles, ainsi qu'au vagrantfile template.	2025-02-07 08:23:01 +01:00
Guillaume Emorine	6b64852985	Légère mise à jour du dépôt.	2025-01-23 09:30:34 +01:00
Guillaume Emorine	41f54f1d4a	Ajout des vagrantfiles de K8s, Terraform, ModSecurity, Ansible, devsec et la vagrantfile template.	2024-12-13 10:00:04 +01:00
guillaume.emorine	b023300795	Actualiser bts_annee_2/README.md Correction de la syntaxe MarkDown.	2024-11-29 11:44:18 +01:00
Guillaume Emorine	bcfc480012	Ajout des fichiers du TP NetBox, et réorganisation des READMEs pour plus de clarté.	2024-11-29 11:42:24 +01:00
Guillaume Emorine	4a4ba1214f	Ajout des vagrantfiles au dépôt.	2024-11-28 12:02:52 +01:00
Guillaume Emorine	996e230d44	Modification finale du script smbcc.sh.	2024-11-18 11:17:00 +01:00
Guillaume Emorine	ee8ba29e39	Légères modifications au script.	2024-11-18 10:53:46 +01:00
Guillaume Emorine	8ac9bac7a1	Légère modification du script du ransomware.	2024-11-18 10:52:18 +01:00
Guillaume Emorine	bcff0b9ebc	Modification des fichiers du TP sur la simulation du ransomware, et ajout de deux clés: une de test, et la vraie clé.	2024-11-18 10:45:27 +01:00
guillaume.emorine	cd8c794bc3	Actualiser bts_annee_2/ateliers_professionalisation/README.md	2024-11-14 15:44:47 +01:00
guillaume.emorine	4fb288042e	Actualiser bts_annee_2/README.md	2024-11-14 15:44:09 +01:00
Guillaume Emorine	adaadd2792	Modification de l'organisation du Gitea, et ajout d'un README pour l'AP SDIS 29.	2024-11-14 15:42:28 +01:00
guillaume.emorine	0624663de2	Actualiser README.md	2024-11-14 15:37:56 +01:00
				`@ -0,0 +1 @@`
				`f1822d2fe58daeadc88e0e4eef2f155fc3edd3713ff9a5d1e27696afd9231d905db51c98dcf0c6416658239b8d3b5893c5775ffd7941f769a78fcd684c5f9161`
				`@ -0,0 +1 @@`
				`0d7b9fea61b5707ff8bf6da489a2638153e8c5d74d3bfab9a12dca6698da3ef61441cf86b819b166cae673efc97c99cb3ab8022c62774636f9e8fe18771a13db -`
				`@ -0,0 +1 @@`
				`# Ce répertoire contient le DS sur les logs tel qu'il a été rendu, le fichier de l'historique bash, ainsi que les fichiers nécessaires pour le contrôle.`
				`@ -0,0 +1 @@`
				`Ce répertoire contient le script élaboré lors du TP sur NetBox, sur une machine Vagrant Docker. Il contient aussi le fichier .csv généré.`
				`@ -0,0 +1 @@`
				`{"name":"debian/bookworm64","version":"12.20240905.1","provider":"virtualbox","directory":"boxes/debian-VAGRANTSLASH-bookworm64/12.20240905.1/virtualbox"}`
				`@ -0,0 +1 @@`
				`{"virtualbox":{"/vagrant":{"guestpath":"/vagrant","hostpath":"/home/guillaume.emorine/vagrant/ELK-apache","disabled":false,"__vagrantfile":true}}}`