summaryrefslogtreecommitdiff
path: root/ansible/kea.yml
blob: b21f6be633dc914713acb5e459a9c4877b9c1a2b (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
- hosts: kea
  remote_user: root
  become: no
  roles:
    - role: sane_debian_system
    - comfortable-debian-system
    - intel-wifi
    - ssd
    - sshd
    - unix_users
    - puomi
  vars:
    ansible_python_interpreter: /usr/bin/python3

    sane_debian_system_version: 2
    sane_debian_system_hostname: "{{ inventory_hostname }}"
    sane_debian_system_codename: bookworm
    sane_debian_system_timezone: Europe/Helsinki
    sane_debian_system_sources_lists:
      - repo: |
          deb http://deb.debian.org/debian bookworm contrib non-free

      - repo: |
          deb http://security.debian.org/debian-security bookworm-security main contrib non-free

    unix_users_version: 2
    unix_users:
      - username: liw
        comment: Lars Wirzenius

    sshd_version: 1
    sshd_host_key: "{{ lookup('pipe', 'sshca host private-key kea') }}"
    sshd_host_cert: "{{ lookup('pipe', 'sshca host certify --ca liw.fi/ca/host/v5 kea') }}"
    sshd_user_ca_pub: "{{ lookup('pipe', 'sshca ca public-key liw.fi/ca/user/v5') }}"

    puomi_version: 1
    puomi_lan_ip: 10.2.0.1