openssl req -newkey rsa:4096 -sha256 -nodes -keyout PRIVATE.key -x509 -days 365 -out PUBLIC.pem

export TELEGRAM_TOKEN=123:abc 
export TELEGRAM_CHAT_ID=567
export CERT_PATH=PUBLIC.pem
export KEY_PATH=PRIVATE.key
./sms-gateway

[raspberry_pi]
192.168.1.100 ansible_user=pi ansible_ssh_private_key_file=~/.ssh/id_rsa

    country: "US"
    state: "New Jersey"
    locality: "Gotham City"
    organization: "jondoe"
    organizational_unit: "None"
    common_name: "sms-bot.example.com"
    email: "[email protected]"
    env_vars:
      TELEGRAM_TOKEN: "your telegram bot token"
      TELEGRAM_CHAT_ID: "your telegram bot chat id"

cd deploy/ansible-playbook/
ansible-playbook -i inventory.ini sms-gateway.yaml

#!/bin/bash

sudo sysctl net.ipv4.ip_forward=1

# Flush existing rules and chains
sudo iptables -F
sudo iptables -X

# Set default policies to ACCEPT
sudo iptables -P INPUT ACCEPT
sudo iptables -P FORWARD ACCEPT
sudo iptables -P OUTPUT ACCEPT

# Enable NAT (if needed)
sudo iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE

# Allow traffic forwarding between interfaces
sudo iptables -A FORWARD -i eth0 -o eth1 -j ACCEPT

# Allow Telegram traffic
sudo iptables -A INPUT -i eth0 -p tcp -m tcp -s 149.154.160.0/20,91.108.4.0/22 --dport 8443 -j ACCEPT
sudo iptables -A INPUT -i eth0 -p tcp -m tcp -s 192.168.11.0/24 --dport 8443 -j ACCEPT
sudo iptables -A INPUT -i eth0 -p tcp -m tcp --dport 8443 -j REJECT

        token: 'xxx',
        port: 8443,
        host: 'your-url-host',

  // token: is your telegram bot token.  
  // port: is the exposed port of the service sms-gateway. Telegram only allows for 443 or 8443.
  // host: is the url to reach to service sms-gateway once deployed.