cloud_init.cfg

#cloud-config
users:
  - name: ${VM_USER}
    sudo: ['ALL=(ALL) NOPASSWD:ALL']
    groups: users, admin
    home: /home/${VM_USER}
    shell: /bin/bash
    ssh-authorized-keys:
      - ssh-rsa AAAAB3NzaC....
ssh_pwauth: True
disable_root: false
chpasswd:
  list: |
     ${VM_USER}:linux
  expire: False
package_update: true
package_upgrade: true
packages:
    - postfix
    - mailutils
    - libsasl2-2
    - libsasl2-modules
    - ca-certificates
    - unzip
growpart:
  mode: auto
  devices: ['/']
fqdn: ${VM_HOSTNAME}
hostname: ${VM_HOSTNAME}
write_files:
  - path: /etc/postfix/sasl_passwd
    content: |
      [smtp.gmail.com]:587    gmail_username.com:gmail_password
    owner: root:root
    permissions: 0400
runcmd:
  - sed -i -e '$aAllowUsers ${VM_USER}' /etc/ssh/sshd_config
  - restart ssh
  - sudo sed -i 's/relayhost =/relayhost = [smtp.gmail.com]:587/g' /etc/postfix/main.cf
  - sudo sed -i 's/inet_protocols =/inet_protocols = ipv4' /etc/postfix/main.cf
  - echo "smtp_sasl_auth_enable = yes" >> /etc/postfix/main.cf
  - echo "smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd" >> /etc/postfix/main.cf
  - echo "smtp_sasl_security_options = noanonymous" >> /etc/postfix/main.cf
  - echo "smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt" >> /etc/postfix/main.cf
  - echo "smtp_use_tls = yes" >> /etc/postfix/main.cf
  - sudo postmap /etc/postfix/sasl_passwd
  - sudo chmod 0400 /etc/postfix/sasl_passwd.db
  - sudo cat /etc/ssl/certs/thawte_Primary_Root_CA.pem >> /etc/postfix/cacert.pem
  - sudo systemctl restart postfix
  - wget https://github.com/gophish/gophish/releases/download/v0.11.0/gophish-v0.11.0-linux-64bit.zip
  - sudo mkdir /opt/gophish
  - sudo unzip gophish-v0.11.0-linux-64bit.zip -d/opt/gophish
  - sudo sed -i 's!127.0.0.1!0.0.0.0!g' /opt/gophish/config.json
  - sudo chmod +x /opt/gophish/gophish
  - cd /opt/gophish
  - sudo ./gophish