diff options
author | Lars Wirzenius <liw@liw.fi> | 2021-08-31 18:39:09 +0300 |
---|---|---|
committer | Lars Wirzenius <liw@liw.fi> | 2021-08-31 18:39:09 +0300 |
commit | ffb55a3266a7fa20da2782eeaa985650d9613964 (patch) | |
tree | 05c684e054c45b27a82369ccef6402d1aa99d257 /ansible | |
parent | b10928a404a30adc91c6a537a131b4714da5fa70 (diff) | |
download | ansibleness-ffb55a3266a7fa20da2782eeaa985650d9613964.tar.gz |
sshca-dev; exolobe5 new key experiment
Sponsored-by: author
Diffstat (limited to 'ansible')
-rw-r--r-- | ansible/exolobe5.yml | 1 | ||||
-rw-r--r-- | ansible/group_vars/all.yml | 4 | ||||
-rw-r--r-- | ansible/hosts | 1 | ||||
-rw-r--r-- | ansible/sshca-dev.yml | 51 |
4 files changed, 57 insertions, 0 deletions
diff --git a/ansible/exolobe5.yml b/ansible/exolobe5.yml index 18017f2..a4c8b15 100644 --- a/ansible/exolobe5.yml +++ b/ansible/exolobe5.yml @@ -26,6 +26,7 @@ sudo: yes authorized_keys: | {{ liw_ssh_pub }} + {{ liw_main_ssh_pub }} mailname: "{{ sane_debian_system_hostname }}.liw.fi" relayhost: pieni.net:587 diff --git a/ansible/group_vars/all.yml b/ansible/group_vars/all.yml index fb5a6e3..65dced7 100644 --- a/ansible/group_vars/all.yml +++ b/ansible/group_vars/all.yml @@ -2,6 +2,10 @@ liw_ssh_pub: | ssh-rsa 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 openpgp:0xBBE80E50 +liw_main_ssh_pub: | + ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIELIWw04cKL9ayw4r/UdvZYSIBeVDQL3XQ9x3S3KlyXg liw@liw.fi main personal key + + dan_ssh_pub: | ssh-rsa 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 dan@danalderman.co.uk diff --git a/ansible/hosts b/ansible/hosts index 517573d..9a301bc 100644 --- a/ansible/hosts +++ b/ansible/hosts @@ -38,6 +38,7 @@ obnam-dev subplot-dev subplot-dan-dev ewww-dev +sshca-dev clab-dev icktool diff --git a/ansible/sshca-dev.yml b/ansible/sshca-dev.yml new file mode 100644 index 0000000..ee92b83 --- /dev/null +++ b/ansible/sshca-dev.yml @@ -0,0 +1,51 @@ +- hosts: sshca-dev + remote_user: debian + become: yes + roles: + - role: sane_debian_system + tags: [sane] + - role: comfortable-debian-system + tags: [comfy] + - role: unix_users + tags: [users] + - role: version-controller + tags: [vacs] + - role: liw + tags: [liw] + - role: rust-rustup + tags: [rustup] + tasks: + - apt: + name: + - debhelper + - build-essential + - dh-cargo + - git + - moreutils + - python3 + - python3-requests + - python3-yaml + - subplot + - texlive-fonts-recommended + - texlive-latex-base + - texlive-latex-recommended + vars: + ansible_python_interpreter: python3 + + sane_debian_system_version: 2 + sane_debian_system_hostname: sshca-dev + sane_debian_system_codename: bullseye + + timezone: Europe/Helsinki + + unix_users_version: 2 + unix_users: + - username: liw + comment: Lars Wirzenius + sudo: yes + authorized_keys: | + {{ liw_ssh_pub }} + + sane_debian_system_sources_lists: + - repo: deb http://ci-prod-controller.vm.liw.fi/debian unstable-ci main + signing_key: "{{ ci_prod_signing_key }}" |