summaryrefslogtreecommitdiff
path: root/ansible/atuin.liw.fi.yml
diff options
context:
space:
mode:
authorLars Wirzenius <liw@liw.fi>2023-09-18 06:45:09 +0300
committerLars Wirzenius <liw@liw.fi>2023-09-18 06:45:09 +0300
commit373ff634e83dfd131fe2c47106da15be82d597c6 (patch)
treea652cbb2e3630c49ef6ed6738dccd932e8e397d4 /ansible/atuin.liw.fi.yml
parent146d3f446353a2af73651b4779df87b975c27740 (diff)
downloadansibleness-373ff634e83dfd131fe2c47106da15be82d597c6.tar.gz
more hosts using the default sshd_ variables when possible
Sponsored-by: author
Diffstat (limited to 'ansible/atuin.liw.fi.yml')
-rw-r--r--ansible/atuin.liw.fi.yml8
1 files changed, 8 insertions, 0 deletions
diff --git a/ansible/atuin.liw.fi.yml b/ansible/atuin.liw.fi.yml
index 6aaf296..7c7c55e 100644
--- a/ansible/atuin.liw.fi.yml
+++ b/ansible/atuin.liw.fi.yml
@@ -77,6 +77,10 @@
ferm_iface_ext: "{{ bridge_nic }}"
+ # We must define the sshd variables here. The defaults from the
+ # "all" group assume sshca knows the host by the
+ # sane_debian_system_hostname name, which isn't true for this
+ # host.
sshd_version: 1
sshd_host_key: "{{ lookup('pipe', 'sshca host private-key atuin.liw.fi') }}"
sshd_host_cert: "{{ lookup('pipe', 'sshca host certify --ca liw.fi/ca/host/v5 atuin.liw.fi') }}"
@@ -207,6 +211,10 @@
smarthost_password: "{{ lookup('pipe', 'pass show pieni.net/pienirelay') }}"
relayhost: pieni.net:587
+ # We must define the sshd variables here. The defaults from the
+ # "all" group assume sshca knows the host by the
+ # sane_debian_system_hostname name, which isn't true for this
+ # host.
sshd_version: 1
sshd_host_key: "{{ lookup('pipe', 'sshca host private-key nalanda.liw.fi') }}"
sshd_host_cert: "{{ lookup('pipe', 'sshca host certify --ca liw.fi/ca/host/v5 nalanda.liw.fi') }}"