summaryrefslogtreecommitdiff
path: root/ansible/exolobe2.yml
blob: 70c4cec6160a996676dc3cb7a7aff0115eab0552 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
- hosts: exolobe2
  remote_user: ansible
  become: yes
  roles:
    - sane_debian_system
    - sshd
    - ssd
    - comfortable-debian-system
    - unix_users
    - self-updating-system
    - emacs
    - vmhost
    - storage_system
    - mail-client
  vars:
    ansible_python_interpreter: /usr/bin/python3

    sane_debian_system_version: 2
    sane_debian_system_hostname: exolobe2
    sane_debian_system_codename: bullseye
    sane_debian_system_sources_lists:
      - repo: |
          deb http://security.debian.org/debian-security bullseye-security main contrib non-free

      - repo: |
          deb http://deb.debian.org/debian bullseye contrib non-free

      - repo: deb http://apt.liw.fi/debian unstable main
        signing_key: "{{ apt_liw_fi_signing_key }}"

    unix_users_version: 2
    unix_users:
      - username: liw
        comment: Lars Wirzenius
        sudo: yes
        authorized_keys: |
          {{ liw_personal_ssh_pub }}
      - username: root
        authorized_keys: |
          {{ liw_personal_ssh_pub }}
      - username: ansible
        sudo: yes
        authorized_keys: |
          {{ liw_personal_ssh_pub }}

    mailname: "{{ sane_debian_system_hostname }}.liw.fi"
    relayhost: pieni.net:587
    smarthost: pieni.net
    smarthost_user: pienirelay
    smarthost_password: "{{ lookup('pipe', 'pass show pieni.net/pienirelay') }}"

    sshd_version: 1