move openwrt image config to host_vars

[noc.git] / ansible / tuer.yml

diff --git a/ansible/tuer.yml b/ansible/tuer.yml
index e061759..0d26eb3 100644 (file)
--- a/ansible/tuer.yml
+++ b/ansible/tuer.yml
@@ -40,98 +40,3 @@
   roles:
     - role: openwrt-image
       delegate_to: localhost
-      vars:
-        openwrt_arch: x86
-        openwrt_target: geode
-        openwrt_output_image_suffixes:
-          - combined-ext4.img.gz
-          - combined-squashfs.img
-        openwrt_packages_remove:
-          - ppp
-          - ppp-mod-pppoe
-          - dnsmasq
-          - firewall
-          - odhcpd
-        openwrt_packages_add:
-          - flashrom
-          - haveged
-          - htop
-          - hwclock
-          - ip
-          - less
-          - nano
-          - tcpdump
-        openwrt_packages_extra:
-          - "-dropbear"
-          - openssh-server
-          - git
-
-        openwrt_mixin:
-          # Go binaries
-          /usr/local/bin/door_client:
-            mode: 0755
-            file: "{{ playbook_dir }}/.cache/openwrt/tuer/door_and_sensors/door_client/door_client"
-          /usr/local/bin/door_daemon:
-            mode: 0755
-            file: "{{ playbook_dir }}/.cache/openwrt/tuer/door_and_sensors/door_daemon/door_daemon"
-          /usr/local/bin/update-keys:
-            mode: 0755
-            file: "{{ playbook_dir }}/.cache/openwrt/tuer/door_and_sensors/update-keys/update-keys"
-
-          /etc/ssh/sshd_config:
-            content: |-
-              Port 22000
-
-              AllowUsers root tuerctl tuergit
-              AuthenticationMethods publickey
-              AuthorizedKeysFile /etc/ssh/authorized_keys.d/%u
-
-              AllowAgentForwarding no
-              AllowTcpForwarding no
-              X11Forwarding no
-              UsePrivilegeSeparation sandbox
-
-          /etc/ssh/authorized_keys.d/root:
-            content: |-
-              {% for key in noc_ssh_keys %}
-              {{ key }}
-              {% endfor %}
-
-        openwrt_uci:
-          network:
-            - name: globals 'globals'
-              options:
-                ula_prefix: fdc9:e01f:83db::/48
-
-            - name: interface 'loopback'
-              options:
-                ifname: lo
-                proto: static
-                ipaddr: 127.0.0.1
-                netmask: 255.0.0.0
-
-            - name: interface 'lan'
-              options:
-                ifname: eth0
-                accept_ra: 0
-                proto: static
-                ipaddr: 192.168.33.7
-                netmask: 255.255.255.0
-                gateway: 192.168.33.1
-                dns: 192.168.33.1
-                dns_search: realraum.at
-
-
-        openwrt_mounts:
-          - path: /run
-            src: none
-            fstype: tmpfs
-            opts: nosuid,nodev,noexec,noatime
-
-        openwrt_users:
-          tuerd: {}
-          tuergit:
-            home:  /var/tuer
-            shell: /usr/bin/git-shell
-          tuerctl:
-            shell: /bin/false # TODO fixme