- web app settings (ftps/php)

-Policies
2026-02-28 03:02:19 +01:00 · 2022-08-11 11:14:28 +02:00
parent 7238a5c4f3
commit f5f8333dce
13 changed files with 93861 additions and 549 deletions
--- a/Powershell/Tools/WebApp
+++ b/Powershell/Tools/WebApp
@@ -0,0 +1,82 @@
+#Connect-AzAccount
+
+class ResourceCheck {
+    [string] $ResourceId = ""
+    [string] $Kind = ""
+    [string] $Location = ""
+    [string] $ResourceName = ""
+    [string] $ResourceGroup = ""
+    [string] $ResourceType = ""
+    [string] $State = ""
+    [string] $SubscriptionId = ""
+    [string] $SubscriptionName = ""
+    [string] $Tag_Team = ""
+    [string] $Tag_Product = ""
+    [string] $Tag_Environment = ""
+    [string] $Tag_Data = ""
+    [string] $Tag_CreatedOnDate = ""
+    [string] $Prop_HttpsOnly = ""
+    [string] $Prop_PhpVersion = ""
+    [string] $Prop_NetFrameworkVersion = ""
+    [string] $Prop_WindowsFxVersion = ""
+    [string] $Prop_RemoteDebuggingEnabled = ""
+    [string] $Prop_MinTlsVersion = ""
+    [string] $Prop_FtpsState = ""
+}
+
+
+Write-Host "======================================================================================================================================================================"
+Write-Host "Creating webapp resource overview."
+Write-Host "======================================================================================================================================================================"
+
+$subscriptions = Get-AzSubscription | Where-Object State -eq "Enabled"
+
+foreach ($subscription in $subscriptions) 
+{
+    Write-Host "----------------------------------------------------------------------------------------------------------------------------------------------------------------------"
+
+    Set-AzContext -SubscriptionId $subscription.Id
+
+    Write-Host "----------------------------------------------------------------------------------------------------------------------------------------------------------------------"
+
+    $allResourceGroups = Get-AzResourceGroup
+
+    foreach ($group in $allResourceGroups) {
+
+        Write-Host "Resource group $($group.ResourceGroupName)"
+
+        $allWebApps = Get-AzWebApp -ResourceGroupName $group.ResourceGroupName
+        
+        foreach ($webApp in $allWebApps) {
+
+            if (($webApp.SiteConfig.FtpsState -ne "Disabled") -and ($webApp.SiteConfig.FtpsState -ne "FtpsOnly")) {
+                Write-Host "Disable FTP $($webApp.Name)"
+                $x = Set-AzWebApp -Name $webApp.Name -ResourceGroupName $group.ResourceGroupName -FtpsState Disabled
+            }
+            if (($webApp.SiteConfig.PhpVersion -ne "off") -and ($webApp.SiteConfig.PhpVersion -ne "")) {
+                Write-Host "Disable PHP $($webApp.Name)"
+                $x = Set-AzWebApp -Name $webApp.Name -ResourceGroupName $group.ResourceGroupName -PhpVersion "off"
+            }
+
+            $allSlots = Get-AzWebAppSlot -Name $webApp.Name -ResourceGroupName $webApp.ResourceGroup
+
+            foreach ($slotTemp in $allSlots) {
+
+                [string] $slotName = $slotTemp.Name.Split("/")[1]
+                $slot = Get-AzWebAppSlot -Name $webApp.Name -ResourceGroupName $webApp.ResourceGroup -Slot $slotName
+
+                if (($slot.SiteConfig.FtpsState -ne "Disabled") -and ($webApp.SiteConfig.FtpsState -ne "FtpsOnly")) {
+                    Write-Host "Disable FTP $($webApp.Name) - $($slotName)"
+                    $y = Set-AzWebAppSlot -Name $webApp.Name -Slot $slotName -ResourceGroupName $group.ResourceGroupName -FtpsState Disabled
+                }
+                if (($slot.SiteConfig.PhpVersion -ne "") -and ($slot.SiteConfig.PhpVersion -ne "off")) {
+                    Write-Host "Disable PHP $($webApp.Name) - $($slotName)"
+                    $y = Set-AzWebAppSlot -Name $webApp.Name -Slot $slotName -ResourceGroupName $group.ResourceGroupName -PhpVersion "off"
+                }
+            }
+        }
+    }
+}
+
+Write-Host "======================================================================================================================================================================"
+Write-Host "Done."