48 lines
1.1 KiB
Text
48 lines
1.1 KiB
Text
---
|
|
### oefenweb.ufw
|
|
ufw_rules:
|
|
- rule: allow
|
|
to_port: 22
|
|
protocol: tcp
|
|
comment: 'ssh'
|
|
from_ip: 192.168.2.0/24
|
|
ufw_default_incoming_policy: deny
|
|
ufw_default_outgoing_policy: allow
|
|
|
|
### apt_install_packages
|
|
apt_packages_extra:
|
|
- qemu
|
|
- virt-manager
|
|
- tmux
|
|
- keychain
|
|
- jq
|
|
- vim
|
|
- cifs-utils
|
|
- nextcloud-desktop
|
|
- keepassxc
|
|
- openssh-server
|
|
- sshpass
|
|
- ansible
|
|
- linux-oem-22.04c
|
|
- vlc
|
|
- rofi
|
|
- wireguard
|
|
|
|
### mgrote_user
|
|
users:
|
|
- username: mg
|
|
password: "{{ lookup('keepass', 'mg_irantu_hash', 'password') }}"
|
|
update_password: always
|
|
groups: ssh, sudo
|
|
state: present
|
|
public_ssh_key: "{{ ssh_public_key_mg }}"
|
|
allow_sudo: true
|
|
allow_passwordless_sudo: true
|
|
- username: ansible-user
|
|
password: "{{ lookup('keepass', 'ansible_user_linux_password_hash', 'password') }}"
|
|
update_password: always
|
|
groups: ssh, sudo
|
|
state: present
|
|
public_ssh_key: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJcBwOjanQV6sFWaTetqpl20SVe3aRzGjKbsp7hKkDCE mg@irantu
|
|
allow_sudo: true
|
|
allow_passwordless_sudo: true
|