Add Azure deployment examples and enhance configuration management

- Update .gitignore to exclude Terraform files
- Enhance README with Azure deployment instructions
- Refactor publish.sh to use a container for changelog parsing
- Add Azure example files including Terraform configurations
- Create cloud-init templates for PKI and default configurations
- Implement workload VM setup for testing routing

examples/cloud-init.yaml.tpl

@@ -9,6 +9,10 @@
 #
 # Template variables are Terraform templatefile() placeholders. Adapt or drop
 # them for whatever renders this file.
+#
+# This variant lets the package generate its own CA on first boot. See
+# cloud-init-with-pki.yaml.tpl for the variant that supplies existing PKI
+# material instead.
 
 hostname: ${hostname}
 fqdn: ${fqdn}
@@ -17,7 +21,7 @@ manage_etc_hosts: false
 apt:
   sources:
     vpn-router:
-      source: "deb [signed-by=/etc/apt/keyrings/vpn-router.gpg] ${repo_url} ${ubuntu_codename} main"
+      source: "deb [signed-by=/etc/apt/keyrings/vpn-router.asc] ${repo_url} ${ubuntu_codename} main"
       key: |
         ${indent(8, trimspace(repo_gpg_key))}
 
@@ -30,6 +34,7 @@ write_files:
     content: |
       [general]
       platform = ${platform}
+      mode = ${mode}
 
       [interfaces]
       external = ${external_interface}
@@ -41,6 +46,7 @@ write_files:
 
       [local]
       cidrs = ${local_cidrs}
+      int_addr = ${int_addr}
       int_gateway_ip = ${int_gateway_ip}
 
       [remote]
@@ -59,26 +65,6 @@ write_files:
       address = ${wg_address}
       listen_port = ${wg_listen_port}
 
-  # Optional: supply your own PKI instead of letting the package create a CA.
-  # Remove these three entries to have a local CA generated on first boot.
-  # <label> is the first component of the FQDN, for example "router" in
-  # router.example.com.
-  - path: /etc/vpn-router/pki/ca_cert.pem
-    permissions: '0644'
-    owner: root:root
-    content: |
-      ${indent(6, trimspace(ca_cert))}
-  - path: /etc/vpn-router/pki/${label}_cert.pem
-    permissions: '0644'
-    owner: root:root
-    content: |
-      ${indent(6, trimspace(server_cert))}
-  - path: /etc/vpn-router/pki/${label}_key.pem
-    permissions: '0600'
-    owner: root:root
-    content: |
-      ${indent(6, trimspace(server_key))}
-
 package_update: true
 
 packages: