mg/homeserver
1
0
Fork 0
Code Issues 1 Pull requests 3 Activity Actions

ssh_public_key_mg als globale/sammel-variable (#228)

Browse source 
Co-authored-by: Michael Grote <michael.grote@posteo.de>
Reviewed-on: mg/ansible#228
Co-authored-by: mg <michael.grote@posteo.de>
Co-committed-by: mg <michael.grote@posteo.de>
This commit is contained in:
Michael Grote 2021-10-22 13:49:06 +02:00
parent e1c3bebcd9
commit 54e1b79879
2 changed files with 3 additions and 12 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
group_vars/all.yml
View file

@ -1,5 +1,6 @@
--- ---
### wird in vielen Rollen verwendet ### wird in vielen Rollen verwendet
ssh_public_key_mg: ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAp7z2WWUS626wY4laQJNGVYs5uOowrSOjd9RLsoPV5GWU46lsD+Q7CblqcBflvkzFiU16bzI0QZcQ9YP5M5LcYreCqCIq2HdeA4/hgIhlBGAzgp4mK8gZsEoCd2rs5888RA8T/oGnAoP0FXBegm2XmXTmt3826ZZUektCanSipMzrT3XUDZDnf1sTY60Fu8GK4hcRIFI7spM0u9upCYXVOrygBmoBQ5GlOyGEPyXs1Am/PERcVZFUPS0mGJ0COVCgEOaVvM8kEn5dK/QpmKqE8OMBsRdQ51pj9BMLNz/0IRnF6OxHDfEyLuqNPZuuBZc+/pULaZefCgjKGL1zXIFFlw==
empfaenger_mail: michael.grote@posteo.de empfaenger_mail: michael.grote@posteo.de
file_header: | file_header: |
#----------------------------------------------------------------# #----------------------------------------------------------------#
@ -114,7 +115,7 @@
- username: mg - username: mg
password: "{{ lookup('keepass', 'mg_linux_password_hash', 'password') }}" password: "{{ lookup('keepass', 'mg_linux_password_hash', 'password') }}"
update_password: on_create update_password: on_create
ssh_key: ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAp7z2WWUS626wY4laQJNGVYs5uOowrSOjd9RLsoPV5GWU46lsD+Q7CblqcBflvkzFiU16bzI0QZcQ9YP5M5LcYreCqCIq2HdeA4/hgIhlBGAzgp4mK8gZsEoCd2rs5888RA8T/oGnAoP0FXBegm2XmXTmt3826ZZUektCanSipMzrT3XUDZDnf1sTY60Fu8GK4hcRIFI7spM0u9upCYXVOrygBmoBQ5GlOyGEPyXs1Am/PERcVZFUPS0mGJ0COVCgEOaVvM8kEn5dK/QpmKqE8OMBsRdQ51pj9BMLNz/0IRnF6OxHDfEyLuqNPZuuBZc+/pULaZefCgjKGL1zXIFFlw== #generieren: ssh-keygen -o; für putty ändern https://www.oracle.com/webfolder/technetwork/tutorials/obe/cloud/ggcs/Change_private_key_format_for_Putty/Change_private_key_format_for_Putty.html#section2 ssh_key: "{{ ssh_public_key_mg }}"
use_sudo: yes use_sudo: yes
use_sudo_nopass: yes use_sudo_nopass: yes
user_state: present user_state: present
@ -124,7 +125,7 @@
- username: mg - username: mg
password: "{{ lookup('keepass', 'mg_linux_password_hash', 'password') }}" password: "{{ lookup('keepass', 'mg_linux_password_hash', 'password') }}"
update_password: on_create update_password: on_create
ssh_key: ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAp7z2WWUS626wY4laQJNGVYs5uOowrSOjd9RLsoPV5GWU46lsD+Q7CblqcBflvkzFiU16bzI0QZcQ9YP5M5LcYreCqCIq2HdeA4/hgIhlBGAzgp4mK8gZsEoCd2rs5888RA8T/oGnAoP0FXBegm2XmXTmt3826ZZUektCanSipMzrT3XUDZDnf1sTY60Fu8GK4hcRIFI7spM0u9upCYXVOrygBmoBQ5GlOyGEPyXs1Am/PERcVZFUPS0mGJ0COVCgEOaVvM8kEn5dK/QpmKqE8OMBsRdQ51pj9BMLNz/0IRnF6OxHDfEyLuqNPZuuBZc+/pULaZefCgjKGL1zXIFFlw== ssh_key: "{{ ssh_public_key_mg }}"
use_sudo: yes use_sudo: yes
use_sudo_nopass: yes use_sudo_nopass: yes
user_state: present user_state: present
@ -154,7 +155,6 @@
- username: root - username: root
password: "{{ lookup('keepass', 'root_linux_password_hash_proxmox', 'password') }}" password: "{{ lookup('keepass', 'root_linux_password_hash_proxmox', 'password') }}"
update_password: always update_password: always
ssh_key: ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAp7z2WWUS626wY4laQJNGVYs5uOowrSOjd9RLsoPV5GWU46lsD+Q7CblqcBflvkzFiU16bzI0QZcQ9YP5M5LcYreCqCIq2HdeA4/hgIhlBGAzgp4mK8gZsEoCd2rs5888RA8T/oGnAoP0FXBegm2XmXTmt3826ZZUektCanSipMzrT3XUDZDnf1sTY60Fu8GK4hcRIFI7spM0u9upCYXVOrygBmoBQ5GlOyGEPyXs1Am/PERcVZFUPS0mGJ0COVCgEOaVvM8kEn5dK/QpmKqE8OMBsRdQ51pj9BMLNz/0IRnF6OxHDfEyLuqNPZuuBZc+/pULaZefCgjKGL1zXIFFlw==
use_sudo: yes use_sudo: yes
use_sudo_nopass: yes use_sudo_nopass: yes
user_state: present user_state: present

9
roles/mgrote.motd/tasks/main.yml
View file

@ -44,15 +44,6 @@
- 90-updates-available - 90-updates-available
- 91-release-upgrade - 91-release-upgrade
- name: delete "Last Login" - Message
become: yes
ansible.builtin.lineinfile:
path: /etc/ssh/sshd_config
regexp: "#PrintLastLog yes"
line: "PrintLastLog no"
backrefs: yes
notify: restart_sshd
- name: delete "no warranty" - Message - name: delete "no warranty" - Message
become: yes become: yes
ansible.builtin.file: ansible.builtin.file: