From 29483678001263c4b43aa155989898ed4dcdeec7 Mon Sep 17 00:00:00 2001
From: Anthony Howe <anhowe@users.noreply.github.com>
Date: Wed, 14 Jul 2021 07:26:05 -0400
Subject: [PATCH] add proxy capability to dns server (#1270)

---
 src/terraform/modules/dnsserver/main.tf       |   4 +-
 src/terraform/modules/dnsserver/variables.tf  |  43 +++---
 src/terraform/modules/dnsserveru/main.tf      | 144 +++++++++---------
 src/terraform/modules/dnsserveru/variables.tf |  35 +++--
 4 files changed, 120 insertions(+), 106 deletions(-)

diff --git a/src/terraform/modules/dnsserver/main.tf b/src/terraform/modules/dnsserver/main.tf
index b31d0d0f..65ff1f20 100644
--- a/src/terraform/modules/dnsserver/main.tf
+++ b/src/terraform/modules/dnsserver/main.tf
@@ -123,6 +123,8 @@ locals {
   script_file_b64       = base64gzip(replace(file("${path.module}/install.sh"), "\r", ""))
   unbound_conf_file_b64 = base64gzip(replace(templatefile("${path.module}/unbound.conf", { max_ttl = var.dns_max_ttl_seconds, excluded_subnets = local.excluded_subnets_str, local_zone_line = local.local_zone_record_str, arecord_lines = local.local_a_records_str, forward_addr_lines = local.foward_lines_str }), "\r", ""))
   cloud_init_file       = templatefile("${path.module}/cloud-init.tpl", { installcmd = local.script_file_b64, unboundconf = local.unbound_conf_file_b64, ssh_port = var.ssh_port })
+
+  proxy_env = (var.proxy == null || var.proxy == "") ? "" : "http_proxy=${var.proxy} https_proxy=${var.proxy} no_proxy=169.254.169.254"
 }
 
 data "azurerm_subnet" "vnet" {
@@ -193,7 +195,7 @@ resource "azurerm_virtual_machine_extension" "cse" {
 
   settings = <<SETTINGS
     {
-        "commandToExecute": " /bin/bash /opt/install.sh"
+        "commandToExecute": " ${var.proxy_env} /bin/bash /opt/install.sh"
     }
 SETTINGS
 }
diff --git a/src/terraform/modules/dnsserver/variables.tf b/src/terraform/modules/dnsserver/variables.tf
index e0c83a57..b9b2b543 100644
--- a/src/terraform/modules/dnsserver/variables.tf
+++ b/src/terraform/modules/dnsserver/variables.tf
@@ -3,17 +3,17 @@ variable "resource_group_name" {
 }
 
 variable "location" {
-    description = "The Azure Region into which the dnsserver will be created."
+  description = "The Azure Region into which the dnsserver will be created."
 }
 
 variable "admin_username" {
   description = "Admin username on the dnsserver."
-  default = "azureuser"
+  default     = "azureuser"
 }
 
 variable "admin_password" {
   description = "(optional) The password used for access to the dnsserver.  If not specified, ssh_key_data needs to be set."
-  default = null
+  default     = null
 }
 
 variable "ssh_key_data" {
@@ -22,17 +22,17 @@ variable "ssh_key_data" {
 
 variable "ssh_port" {
   description = "specifies the tcp port to use for ssh"
-  default = 22
+  default     = 22
 }
 
 variable "unique_name" {
   description = "The unique name used for the dnsserver and for resource names associated with the VM."
-  default = "dnsserver"
+  default     = "dnsserver"
 }
 
 variable "vm_size" {
   description = "Size of the VM."
-  default = "Standard_D2s_v3"
+  default     = "Standard_D2s_v3"
 }
 
 variable "virtual_network_resource_group" {
@@ -49,7 +49,7 @@ variable "virtual_network_subnet_name" {
 
 variable "private_ip_address" {
   description = "specifies a static private ip address to use"
-  default = null
+  default     = null
 }
 
 variable "dns_server" {
@@ -58,52 +58,52 @@ variable "dns_server" {
 
 variable "excluded_subnet_cidrs" {
   description = "the list of excluded subnets from spoofing.  The Cache should be in this subnet."
-  default = []
+  default     = []
 }
 
 variable "avere_address_list" {
   description = "the list of addresses from the Avere vserver."
-  default = []
+  default     = []
 }
 
 variable "avere_first_ip_addr" {
   description = "the first ip address of the Avere vserver."
-  default = ""
+  default     = ""
 }
 
 variable "avere_ip_addr_count" {
   description = "the count of ip addresses on the vserver."
-  default = 0
+  default     = 0
 }
 
 variable "avere_first_ip_addr2" {
   description = "the first ip address of the Avere vserver2."
-  default = ""
+  default     = ""
 }
 
 variable "avere_ip_addr_count2" {
   description = "the count of ip addresses on the vserver2."
-  default = 0
+  default     = 0
 }
 
 variable "avere_first_ip_addr3" {
   description = "the first ip address of the Avere vserver3."
-  default = ""
+  default     = ""
 }
 
 variable "avere_ip_addr_count3" {
   description = "the count of ip addresses on the vserver3."
-  default = 0
+  default     = 0
 }
 
 variable "avere_first_ip_addr4" {
   description = "the first ip address of the Avere vserver4."
-  default = ""
+  default     = ""
 }
 
 variable "avere_ip_addr_count4" {
   description = "the count of ip addresses on the vserver4."
-  default = 0
+  default     = 0
 }
 
 variable "avere_filer_fqdn" {
@@ -112,10 +112,15 @@ variable "avere_filer_fqdn" {
 
 variable "dns_max_ttl_seconds" {
   description = "The max ttl in seconds of the dns records, the default is 5 minutes.  This will cap larger TTLS, and TTLs set lower than this value will still be respected."
-  default = 300
+  default     = 300
 }
 
 variable "avere_filer_alternate_fqdn" {
-  default = []
+  default     = []
   description = "alternate fqdn of the avere and is useful to point other names at Avere or can be used to emulate a domain search list."
 }
+
+variable "proxy" {
+  description = "specify a proxy address if one exists in the format of http://PROXY_SERVER:PORT"
+  default     = null
+}
diff --git a/src/terraform/modules/dnsserveru/main.tf b/src/terraform/modules/dnsserveru/main.tf
index 4eb080cc..b0aa7e19 100644
--- a/src/terraform/modules/dnsserveru/main.tf
+++ b/src/terraform/modules/dnsserveru/main.tf
@@ -1,105 +1,107 @@
 locals {
   # create the A record lines for the first Avere
-  last_octet = split(".", var.avere_first_ip_addr)[3]
+  last_octet  = split(".", var.avere_first_ip_addr)[3]
   addr_prefix = trimsuffix(var.avere_first_ip_addr, ".${local.last_octet}")
   # technique from article: https://forum.netgate.com/topic/120486/round-robin-for-dns-forwarder-network-address/3
-  local_a_records = [for i in range(var.avere_ip_addr_count): "local-data: \"${var.avere_filer_fqdn} ${var.dns_max_ttl_seconds} A ${local.addr_prefix}.${local.last_octet + i}\""]
-  local_a_records_reverse = [for i in range(var.avere_ip_addr_count): "local-data-ptr: \"${local.addr_prefix}.${local.last_octet + i} ${var.dns_max_ttl_seconds} ${var.avere_filer_fqdn}\""]
-  
+  local_a_records         = [for i in range(var.avere_ip_addr_count) : "local-data: \"${var.avere_filer_fqdn} ${var.dns_max_ttl_seconds} A ${local.addr_prefix}.${local.last_octet + i}\""]
+  local_a_records_reverse = [for i in range(var.avere_ip_addr_count) : "local-data-ptr: \"${local.addr_prefix}.${local.last_octet + i} ${var.dns_max_ttl_seconds} ${var.avere_filer_fqdn}\""]
+
   # alternate fqdn
   local_alternate_a_records = flatten([
-    for i in range(length(var.avere_filer_alternate_fqdn)): [
-      for j in range(var.avere_ip_addr_count): 
-        "local-data: \"${var.avere_filer_alternate_fqdn[i]} ${var.dns_max_ttl_seconds} A ${local.addr_prefix}.${local.last_octet + j}\""
-        ]
+    for i in range(length(var.avere_filer_alternate_fqdn)) : [
+      for j in range(var.avere_ip_addr_count) :
+      "local-data: \"${var.avere_filer_alternate_fqdn[i]} ${var.dns_max_ttl_seconds} A ${local.addr_prefix}.${local.last_octet + j}\""
+    ]
   ])
   # reverse records
   local_alternate_a_records_reverse = flatten([
-    for i in range(length(var.avere_filer_alternate_fqdn)): [
-      for j in range(var.avere_ip_addr_count): 
-        "local-data-ptr: \"${local.addr_prefix}.${local.last_octet + j} ${var.dns_max_ttl_seconds} ${var.avere_filer_alternate_fqdn[i]}\""
-        ]
+    for i in range(length(var.avere_filer_alternate_fqdn)) : [
+      for j in range(var.avere_ip_addr_count) :
+      "local-data-ptr: \"${local.addr_prefix}.${local.last_octet + j} ${var.dns_max_ttl_seconds} ${var.avere_filer_alternate_fqdn[i]}\""
+    ]
   ])
 
   # create the A record lines for the second Avere
-  last_octet2 = var.avere_first_ip_addr2 == "" ? "" : split(".", var.avere_first_ip_addr2)[3]
+  last_octet2  = var.avere_first_ip_addr2 == "" ? "" : split(".", var.avere_first_ip_addr2)[3]
   addr_prefix2 = var.avere_first_ip_addr2 == "" ? "" : trimsuffix(var.avere_first_ip_addr2, ".${local.last_octet2}")
 
-  local_a_records2 = var.avere_first_ip_addr2 == "" ? [] : [for i in range(var.avere_ip_addr_count2): "local-data: \"${var.avere_filer_fqdn} ${var.dns_max_ttl_seconds} A ${local.addr_prefix2}.${local.last_octet2 + i}\""]
-  local_a_records_reverse2 = var.avere_first_ip_addr2 == "" ? [] : [for i in range(var.avere_ip_addr_count2): "local-data-ptr: \"${local.addr_prefix2}.${local.last_octet2 + i} ${var.dns_max_ttl_seconds} ${var.avere_filer_fqdn}\""]
+  local_a_records2         = var.avere_first_ip_addr2 == "" ? [] : [for i in range(var.avere_ip_addr_count2) : "local-data: \"${var.avere_filer_fqdn} ${var.dns_max_ttl_seconds} A ${local.addr_prefix2}.${local.last_octet2 + i}\""]
+  local_a_records_reverse2 = var.avere_first_ip_addr2 == "" ? [] : [for i in range(var.avere_ip_addr_count2) : "local-data-ptr: \"${local.addr_prefix2}.${local.last_octet2 + i} ${var.dns_max_ttl_seconds} ${var.avere_filer_fqdn}\""]
 
   # alternate fqdn
   local_alternate_a_records2 = var.avere_first_ip_addr2 == "" ? [] : flatten([
-    for i in range(length(var.avere_filer_alternate_fqdn)): [
-      for j in range(var.avere_ip_addr_count2): 
-        "local-data: \"${var.avere_filer_alternate_fqdn[i]} ${var.dns_max_ttl_seconds} A ${local.addr_prefix2}.${local.last_octet2 + j}\""
-        ]
+    for i in range(length(var.avere_filer_alternate_fqdn)) : [
+      for j in range(var.avere_ip_addr_count2) :
+      "local-data: \"${var.avere_filer_alternate_fqdn[i]} ${var.dns_max_ttl_seconds} A ${local.addr_prefix2}.${local.last_octet2 + j}\""
+    ]
   ])
   # reverse records
   local_alternate_a_records_reverse2 = var.avere_first_ip_addr2 == "" ? [] : flatten([
-    for i in range(length(var.avere_filer_alternate_fqdn)): [
-      for j in range(var.avere_ip_addr_count2): 
-        "local-data-ptr: \"${local.addr_prefix2}.${local.last_octet2 + j} ${var.dns_max_ttl_seconds} ${var.avere_filer_alternate_fqdn[i]}\""
-        ]
+    for i in range(length(var.avere_filer_alternate_fqdn)) : [
+      for j in range(var.avere_ip_addr_count2) :
+      "local-data-ptr: \"${local.addr_prefix2}.${local.last_octet2 + j} ${var.dns_max_ttl_seconds} ${var.avere_filer_alternate_fqdn[i]}\""
+    ]
   ])
 
   # create the A record lines for the third Avere
-  last_octet3 = var.avere_first_ip_addr3 == "" ? "" : split(".", var.avere_first_ip_addr3)[3]
+  last_octet3  = var.avere_first_ip_addr3 == "" ? "" : split(".", var.avere_first_ip_addr3)[3]
   addr_prefix3 = var.avere_first_ip_addr3 == "" ? "" : trimsuffix(var.avere_first_ip_addr3, ".${local.last_octet3}")
 
-  local_a_records3 = var.avere_first_ip_addr3 == "" ? [] : [for i in range(var.avere_ip_addr_count3): "local-data: \"${var.avere_filer_fqdn} ${var.dns_max_ttl_seconds} A ${local.addr_prefix3}.${local.last_octet3 + i}\""]
-  local_a_records_reverse3 = var.avere_first_ip_addr3 == "" ? [] : [for i in range(var.avere_ip_addr_count3): "local-data-ptr: \"${local.addr_prefix3}.${local.last_octet3 + i} ${var.dns_max_ttl_seconds} ${var.avere_filer_fqdn}\""]
+  local_a_records3         = var.avere_first_ip_addr3 == "" ? [] : [for i in range(var.avere_ip_addr_count3) : "local-data: \"${var.avere_filer_fqdn} ${var.dns_max_ttl_seconds} A ${local.addr_prefix3}.${local.last_octet3 + i}\""]
+  local_a_records_reverse3 = var.avere_first_ip_addr3 == "" ? [] : [for i in range(var.avere_ip_addr_count3) : "local-data-ptr: \"${local.addr_prefix3}.${local.last_octet3 + i} ${var.dns_max_ttl_seconds} ${var.avere_filer_fqdn}\""]
 
   # alternate fqdn
   local_alternate_a_records3 = var.avere_first_ip_addr3 == "" ? [] : flatten([
-    for i in range(length(var.avere_filer_alternate_fqdn)): [
-      for j in range(var.avere_ip_addr_count3): 
-        "local-data: \"${var.avere_filer_alternate_fqdn[i]} ${var.dns_max_ttl_seconds} A ${local.addr_prefix3}.${local.last_octet3 + j}\""
-        ]
+    for i in range(length(var.avere_filer_alternate_fqdn)) : [
+      for j in range(var.avere_ip_addr_count3) :
+      "local-data: \"${var.avere_filer_alternate_fqdn[i]} ${var.dns_max_ttl_seconds} A ${local.addr_prefix3}.${local.last_octet3 + j}\""
+    ]
   ])
   # reverse records
   local_alternate_a_records_reverse3 = var.avere_first_ip_addr3 == "" ? [] : flatten([
-    for i in range(length(var.avere_filer_alternate_fqdn)): [
-      for j in range(var.avere_ip_addr_count3): 
-        "local-data-ptr: \"${local.addr_prefix3}.${local.last_octet3 + j} ${var.dns_max_ttl_seconds} ${var.avere_filer_alternate_fqdn[i]}\""
-        ]
+    for i in range(length(var.avere_filer_alternate_fqdn)) : [
+      for j in range(var.avere_ip_addr_count3) :
+      "local-data-ptr: \"${local.addr_prefix3}.${local.last_octet3 + j} ${var.dns_max_ttl_seconds} ${var.avere_filer_alternate_fqdn[i]}\""
+    ]
   ])
 
-   # create the A record lines for the fourth Avere
-  last_octet4 = var.avere_first_ip_addr4 == "" ? "" : split(".", var.avere_first_ip_addr4)[3]
+  # create the A record lines for the fourth Avere
+  last_octet4  = var.avere_first_ip_addr4 == "" ? "" : split(".", var.avere_first_ip_addr4)[3]
   addr_prefix4 = var.avere_first_ip_addr4 == "" ? "" : trimsuffix(var.avere_first_ip_addr4, ".${local.last_octet4}")
 
-  local_a_records4 = var.avere_first_ip_addr4 == "" ? [] : [for i in range(var.avere_ip_addr_count4): "local-data: \"${var.avere_filer_fqdn} ${var.dns_max_ttl_seconds} A ${local.addr_prefix4}.${local.last_octet4 + i}\""]
-  local_a_records_reverse4 = var.avere_first_ip_addr4 == "" ? [] : [for i in range(var.avere_ip_addr_count4): "local-data-ptr: \"${local.addr_prefix4}.${local.last_octet4 + i} ${var.dns_max_ttl_seconds} ${var.avere_filer_fqdn}\""]
+  local_a_records4         = var.avere_first_ip_addr4 == "" ? [] : [for i in range(var.avere_ip_addr_count4) : "local-data: \"${var.avere_filer_fqdn} ${var.dns_max_ttl_seconds} A ${local.addr_prefix4}.${local.last_octet4 + i}\""]
+  local_a_records_reverse4 = var.avere_first_ip_addr4 == "" ? [] : [for i in range(var.avere_ip_addr_count4) : "local-data-ptr: \"${local.addr_prefix4}.${local.last_octet4 + i} ${var.dns_max_ttl_seconds} ${var.avere_filer_fqdn}\""]
 
   # alternate fqdn
   local_alternate_a_records4 = var.avere_first_ip_addr4 == "" ? [] : flatten([
-    for i in range(length(var.avere_filer_alternate_fqdn)): [
-      for j in range(var.avere_ip_addr_count4): 
-        "local-data: \"${var.avere_filer_alternate_fqdn[i]} ${var.dns_max_ttl_seconds} A ${local.addr_prefix4}.${local.last_octet4 + j}\""
-        ]
+    for i in range(length(var.avere_filer_alternate_fqdn)) : [
+      for j in range(var.avere_ip_addr_count4) :
+      "local-data: \"${var.avere_filer_alternate_fqdn[i]} ${var.dns_max_ttl_seconds} A ${local.addr_prefix4}.${local.last_octet4 + j}\""
+    ]
   ])
   # reverse records
   local_alternate_a_records_reverse4 = var.avere_first_ip_addr4 == "" ? [] : flatten([
-    for i in range(length(var.avere_filer_alternate_fqdn)): [
-      for j in range(var.avere_ip_addr_count4): 
-        "local-data-ptr: \"${local.addr_prefix4}.${local.last_octet4 + j} ${var.dns_max_ttl_seconds} ${var.avere_filer_alternate_fqdn[i]}\""
-        ]
+    for i in range(length(var.avere_filer_alternate_fqdn)) : [
+      for j in range(var.avere_ip_addr_count4) :
+      "local-data-ptr: \"${local.addr_prefix4}.${local.last_octet4 + j} ${var.dns_max_ttl_seconds} ${var.avere_filer_alternate_fqdn[i]}\""
+    ]
   ])
-  
+
   # join everything into the same string
-  all_a_records = concat(local.local_a_records, local.local_a_records_reverse, local.local_alternate_a_records, local.local_alternate_a_records_reverse, local.local_a_records2, local.local_a_records_reverse2, local.local_alternate_a_records2, local.local_alternate_a_records_reverse2, local.local_a_records3, local.local_a_records_reverse3, local.local_alternate_a_records3, local.local_alternate_a_records_reverse3, local.local_a_records4, local.local_a_records_reverse4, local.local_alternate_a_records4, local.local_alternate_a_records_reverse4)
+  all_a_records       = concat(local.local_a_records, local.local_a_records_reverse, local.local_alternate_a_records, local.local_alternate_a_records_reverse, local.local_a_records2, local.local_a_records_reverse2, local.local_alternate_a_records2, local.local_alternate_a_records_reverse2, local.local_a_records3, local.local_a_records_reverse3, local.local_alternate_a_records3, local.local_alternate_a_records_reverse3, local.local_a_records4, local.local_a_records_reverse4, local.local_alternate_a_records4, local.local_alternate_a_records_reverse4)
   local_a_records_str = "local-zone: \"${var.avere_filer_fqdn}\" transparent\n  ${join("\n  ", local.all_a_records)}"
 
   # create the dns forward lines  
-  dns_servers = var.dns_server == null || var.dns_server == "" ? [] : split(" ", var.dns_server)
-  forward_lines = [for s in local.dns_servers : "forward-addr: ${s}"]
+  dns_servers      = var.dns_server == null || var.dns_server == "" ? [] : split(" ", var.dns_server)
+  forward_lines    = [for s in local.dns_servers : "forward-addr: ${s}"]
   foward_lines_str = join("\n  ", local.forward_lines)
 
   # send the script file to custom data, adding env vars
-  script_file_b64 = base64gzip(replace(file("${path.module}/install.sh"),"\r",""))
-  unbound_conf_file_b64 = base64gzip(replace(templatefile("${path.module}/unbound.conf", { max_ttl = var.dns_max_ttl_seconds, arecord_lines = local.local_a_records_str, forward_addr_lines = local.foward_lines_str }),"\r",""))
-  cloud_init_file = templatefile("${path.module}/cloud-init.tpl", { installcmd = local.script_file_b64, unboundconf = local.unbound_conf_file_b64, ssh_port = var.ssh_port })
+  script_file_b64       = base64gzip(replace(file("${path.module}/install.sh"), "\r", ""))
+  unbound_conf_file_b64 = base64gzip(replace(templatefile("${path.module}/unbound.conf", { max_ttl = var.dns_max_ttl_seconds, arecord_lines = local.local_a_records_str, forward_addr_lines = local.foward_lines_str }), "\r", ""))
+  cloud_init_file       = templatefile("${path.module}/cloud-init.tpl", { installcmd = local.script_file_b64, unboundconf = local.unbound_conf_file_b64, ssh_port = var.ssh_port })
+
+  proxy_env = (var.proxy == null || var.proxy == "") ? "" : "http_proxy=${var.proxy} https_proxy=${var.proxy} no_proxy=169.254.169.254"
 }
 
 data "azurerm_subnet" "vnet" {
@@ -111,7 +113,7 @@ data "azurerm_subnet" "vnet" {
 data "azurerm_subscription" "primary" {}
 
 data "azurerm_resource_group" "vm" {
-  name     = var.resource_group_name
+  name = var.resource_group_name
 }
 
 resource "azurerm_network_interface" "vm" {
@@ -128,17 +130,17 @@ resource "azurerm_network_interface" "vm" {
 }
 
 resource "azurerm_linux_virtual_machine" "vm" {
-  name = "${var.unique_name}-vm"
-  location = var.location
-  resource_group_name = data.azurerm_resource_group.vm.name
+  name                  = "${var.unique_name}-vm"
+  location              = var.location
+  resource_group_name   = data.azurerm_resource_group.vm.name
   network_interface_ids = [azurerm_network_interface.vm.id]
-  computer_name  = var.unique_name
-  custom_data = base64encode(local.cloud_init_file)
-  size = var.vm_size
+  computer_name         = var.unique_name
+  custom_data           = base64encode(local.cloud_init_file)
+  size                  = var.vm_size
 
   os_disk {
-    name              = "${var.unique_name}-osdisk"
-    caching           = "ReadWrite"
+    name                 = "${var.unique_name}-osdisk"
+    caching              = "ReadWrite"
     storage_account_type = "Standard_LRS"
   }
 
@@ -153,20 +155,20 @@ resource "azurerm_linux_virtual_machine" "vm" {
     version   = "latest"
   }
 
-  admin_username = var.admin_username
-  admin_password = (var.ssh_key_data == null || var.ssh_key_data == "") && var.admin_password != null && var.admin_password != "" ? var.admin_password : null
+  admin_username                  = var.admin_username
+  admin_password                  = (var.ssh_key_data == null || var.ssh_key_data == "") && var.admin_password != null && var.admin_password != "" ? var.admin_password : null
   disable_password_authentication = (var.ssh_key_data == null || var.ssh_key_data == "") && var.admin_password != null && var.admin_password != "" ? false : true
   dynamic "admin_ssh_key" {
-      for_each = var.ssh_key_data == null || var.ssh_key_data == "" ? [] : [var.ssh_key_data]
-      content {
-          username   = var.admin_username
-          public_key = var.ssh_key_data
-      }
+    for_each = var.ssh_key_data == null || var.ssh_key_data == "" ? [] : [var.ssh_key_data]
+    content {
+      username   = var.admin_username
+      public_key = var.ssh_key_data
+    }
   }
 }
 
 resource "azurerm_virtual_machine_extension" "cse" {
-  name = "${var.unique_name}-cse"
+  name                 = "${var.unique_name}-cse"
   virtual_machine_id   = azurerm_linux_virtual_machine.vm.id
   publisher            = "Microsoft.Azure.Extensions"
   type                 = "CustomScript"
@@ -174,7 +176,7 @@ resource "azurerm_virtual_machine_extension" "cse" {
 
   settings = <<SETTINGS
     {
-        "commandToExecute": " /bin/bash /opt/install.sh"
+        "commandToExecute": " ${var.proxy_env} /bin/bash /opt/install.sh"
     }
 SETTINGS
 }
diff --git a/src/terraform/modules/dnsserveru/variables.tf b/src/terraform/modules/dnsserveru/variables.tf
index 175a8970..46db57da 100644
--- a/src/terraform/modules/dnsserveru/variables.tf
+++ b/src/terraform/modules/dnsserveru/variables.tf
@@ -3,17 +3,17 @@ variable "resource_group_name" {
 }
 
 variable "location" {
-    description = "The Azure Region into which the dnsserver will be created."
+  description = "The Azure Region into which the dnsserver will be created."
 }
 
 variable "admin_username" {
   description = "Admin username on the dnsserver."
-  default = "azureuser"
+  default     = "azureuser"
 }
 
 variable "admin_password" {
   description = "(optional) The password used for access to the dnsserver.  If not specified, ssh_key_data needs to be set."
-  default = null
+  default     = null
 }
 
 variable "ssh_key_data" {
@@ -22,17 +22,17 @@ variable "ssh_key_data" {
 
 variable "ssh_port" {
   description = "specifies the tcp port to use for ssh"
-  default = 22
+  default     = 22
 }
 
 variable "unique_name" {
   description = "The unique name used for the dnsserver and for resource names associated with the VM."
-  default = "dnsserver"
+  default     = "dnsserver"
 }
 
 variable "vm_size" {
   description = "Size of the VM."
-  default = "Standard_D2s_v3"
+  default     = "Standard_D2s_v3"
 }
 
 variable "virtual_network_resource_group" {
@@ -49,7 +49,7 @@ variable "virtual_network_subnet_name" {
 
 variable "private_ip_address" {
   description = "specifies a static private ip address to use"
-  default = null
+  default     = null
 }
 
 variable "dns_server" {
@@ -66,32 +66,32 @@ variable "avere_ip_addr_count" {
 
 variable "avere_first_ip_addr2" {
   description = "the first ip address of the Avere vserver2."
-  default = ""
+  default     = ""
 }
 
 variable "avere_ip_addr_count2" {
   description = "the count of ip addresses on the vserver2."
-  default = 0
+  default     = 0
 }
 
 variable "avere_first_ip_addr3" {
   description = "the first ip address of the Avere vserver3."
-  default = ""
+  default     = ""
 }
 
 variable "avere_ip_addr_count3" {
   description = "the count of ip addresses on the vserver3."
-  default = 0
+  default     = 0
 }
 
 variable "avere_first_ip_addr4" {
   description = "the first ip address of the Avere vserver4."
-  default = ""
+  default     = ""
 }
 
 variable "avere_ip_addr_count4" {
   description = "the count of ip addresses on the vserver4."
-  default = 0
+  default     = 0
 }
 
 variable "avere_filer_fqdn" {
@@ -100,10 +100,15 @@ variable "avere_filer_fqdn" {
 
 variable "dns_max_ttl_seconds" {
   description = "The max ttl in seconds of the dns records, the default is 5 minutes.  This will cap larger TTLS, and TTLs set lower than this value will still be respected."
-  default = 300
+  default     = 300
 }
 
 variable "avere_filer_alternate_fqdn" {
-  default = []
+  default     = []
   description = "alternate fqdn of the avere and is useful to point other names at Avere or can be used to emulate a domain search list."
 }
+
+variable "proxy" {
+  description = "specify a proxy address if one exists in the format of http://PROXY_SERVER:PORT"
+  default     = null
+}