From 067ee8bc4e65bb0a4ebcb359d7398cd47801922c Mon Sep 17 00:00:00 2001
From: Lars Wirzenius <liw@liw.fi>
Date: Sat, 10 Sep 2022 10:07:51 +0300
Subject: irc.liw.fi: install SSH host certificate

Sponsored-by: author
---
 ansible/irc.liw.fi.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/ansible/irc.liw.fi.yml b/ansible/irc.liw.fi.yml
index 54a50c5..ca6030e 100644
--- a/ansible/irc.liw.fi.yml
+++ b/ansible/irc.liw.fi.yml
@@ -2,6 +2,7 @@
   remote_user: root
   roles:
     - role: sane_debian_system
+    - role: sshd
     - role: comfortable-debian-system
     - role: unix_users
     - role: self-updating-system
@@ -27,3 +28,8 @@
         comment: Lars Wirzenius
         authorized_keys: |
           {{ liw_personal_ssh_pub }}
+
+    sshd_version: 1
+    sshd_host_key: "{{ lookup('pipe', 'sshca host private-key irc.liw.fi') }}"
+    sshd_host_cert: "{{ lookup('pipe', 'sshca host certify liw.fi/ca/host/v4 irc.liw.fi') }}"
+    sshd_user_ca_pub: "{{ lookup('pipe', 'sshca ca public-key liw.fi/ca/user/v3') }}"
-- 
cgit v1.2.1