X-Git-Url: https://git.realraum.at/?a=blobdiff_plain;f=ansible%2Ftuer.yml;fp=ansible%2Ftuer.yml;h=8183e5f0e8d2627b519f78743d0a35c2828fcea3;hb=ac8dd6f517b3e695ce8c508e054f5234cd57cba1;hp=4b3bd7a9d6daf92feb28b288a78b1757bc9a29e4;hpb=63f0a1a580f9011f377c4564527dbf0978eb7b90;p=noc.git diff --git a/ansible/tuer.yml b/ansible/tuer.yml index 4b3bd7a..8183e5f 100644 --- a/ansible/tuer.yml +++ b/ansible/tuer.yml @@ -65,6 +65,7 @@ - "-dropbear" - openssh-server - git + - sudo openwrt_mixin: # Go binaries @@ -82,6 +83,10 @@ mode: '0755' file: "{{ playbook_dir }}/files/tuer/authorized_keys.sh" + /usr/local/bin/update-keys-from-stdin.sh: + mode: '0755' + file: "{{ playbook_dir }}/files/tuer/update-keys-from-stdin.sh" + /etc/ssh/sshd_config: content: |- Port 22000 @@ -107,6 +112,12 @@ {{ key }} {% endfor %} + /etc/ssh/authorized_keys.d/tuergit: + content: |- + {% for key in noc_ssh_keys %} + {{ key }} + {% endfor %} + openwrt_uci: network: - name: globals 'globals' @@ -141,7 +152,7 @@ openwrt_users: tuerd: {} tuergit: - home: /var/tuer + home: /home/tuergit shell: /usr/bin/git-shell tuerctl: shell: /bin/false # TODO fixme