sshca-dev; exolobe5 new key experiment

Sponsored-by: author

4 files changed, 57 insertions, 0 deletions

diff --git a/ansible/exolobe5.yml b/ansible/exolobe5.yml
index 18017f2..a4c8b15 100644
--- a/ansible/exolobe5.yml
+++ b/ansible/exolobe5.yml
@@ -26,6 +26,7 @@
         sudo: yes
         authorized_keys: |
           {{ liw_ssh_pub }}
+          {{ liw_main_ssh_pub }}
 
     mailname: "{{ sane_debian_system_hostname }}.liw.fi"
     relayhost: pieni.net:587
diff --git a/ansible/group_vars/all.yml b/ansible/group_vars/all.yml
index fb5a6e3..65dced7 100644
--- a/ansible/group_vars/all.yml
+++ b/ansible/group_vars/all.yml
@@ -2,6 +2,10 @@ liw_ssh_pub: |
   ssh-rsa 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 openpgp:0xBBE80E50
 
 
+liw_main_ssh_pub: |
+  ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIELIWw04cKL9ayw4r/UdvZYSIBeVDQL3XQ9x3S3KlyXg liw@liw.fi main personal key
+
+
 dan_ssh_pub: |
   ssh-rsa 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 dan@danalderman.co.uk
 
diff --git a/ansible/hosts b/ansible/hosts
index 517573d..9a301bc 100644
--- a/ansible/hosts
+++ b/ansible/hosts
@@ -38,6 +38,7 @@ obnam-dev
 subplot-dev
 subplot-dan-dev
 ewww-dev
+sshca-dev
 clab-dev
 icktool
 
diff --git a/ansible/sshca-dev.yml b/ansible/sshca-dev.yml
new file mode 100644
index 0000000..ee92b83
--- /dev/null
+++ b/ansible/sshca-dev.yml
@@ -0,0 +1,51 @@
+- hosts: sshca-dev
+  remote_user: debian
+  become: yes
+  roles:
+    - role: sane_debian_system
+      tags: [sane]
+    - role: comfortable-debian-system
+      tags: [comfy]
+    - role: unix_users
+      tags: [users]
+    - role: version-controller
+      tags: [vacs]
+    - role: liw
+      tags: [liw]
+    - role: rust-rustup
+      tags: [rustup]
+  tasks:
+    - apt:
+        name:
+          - debhelper
+          - build-essential
+          - dh-cargo
+          - git
+          - moreutils
+          - python3
+          - python3-requests
+          - python3-yaml
+          - subplot
+          - texlive-fonts-recommended
+          - texlive-latex-base
+          - texlive-latex-recommended
+  vars:
+    ansible_python_interpreter: python3
+
+    sane_debian_system_version: 2
+    sane_debian_system_hostname: sshca-dev
+    sane_debian_system_codename: bullseye
+
+    timezone: Europe/Helsinki
+
+    unix_users_version: 2
+    unix_users:
+      - username: liw
+        comment: Lars Wirzenius
+        sudo: yes
+        authorized_keys: |
+          {{ liw_ssh_pub }}
+
+    sane_debian_system_sources_lists:
+      - repo: deb http://ci-prod-controller.vm.liw.fi/debian unstable-ci main
+        signing_key: "{{ ci_prod_signing_key }}"