X-Git-Url: https://git.realraum.at/?a=blobdiff_plain;f=ansible%2Ftuer.yml;h=1ed9f12c8f2ec1ceb332be6512918e20fda7614b;hb=4582c57b9fe0d77f0997c08f471a1ae38c52377f;hp=f0017c732f0e2848e219df3e4ae3a9a7df9254a9;hpb=5edd0fe042597035922f1bc215b88053a82c68b2;p=noc.git

diff --git a/ansible/tuer.yml b/ansible/tuer.yml
index f0017c7..1ed9f12 100644
--- a/ansible/tuer.yml
+++ b/ansible/tuer.yml
@@ -65,14 +65,19 @@
           - git
 
         openwrt_mixin:
-          files:
-            # Go binaries
-            /usr/local/bin/door_client: "{{ playbook_dir }}/.cache/openwrt/tuer/door_and_sensors/door_client/door_client"
-            /usr/local/bin/door_daemon: "{{ playbook_dir }}/.cache/openwrt/tuer/door_and_sensors/door_daemon/door_daemon"
-            /usr/local/bin/update-keys: "{{ playbook_dir }}/.cache/openwrt/tuer/door_and_sensors/update-keys/update-keys"
+          # Go binaries
+          /usr/local/bin/door_client:
+            mode: 0755
+            file: "{{ playbook_dir }}/.cache/openwrt/tuer/door_and_sensors/door_client/door_client"
+          /usr/local/bin/door_daemon:
+            mode: 0755
+            file: "{{ playbook_dir }}/.cache/openwrt/tuer/door_and_sensors/door_daemon/door_daemon"
+          /usr/local/bin/update-keys:
+            mode: 0755
+            file: "{{ playbook_dir }}/.cache/openwrt/tuer/door_and_sensors/update-keys/update-keys"
 
-          content:
-            /etc/config/network: |
+          /etc/config/network:
+            content: |
               config interface 'loopback'
               	option ifname 'lo'
               	option proto 'static'
@@ -92,14 +97,16 @@
               	option dns     '192.168.33.1'
               	option dns_search 'realraum.at'
 
-            /etc/config/dropbear: |
+          /etc/config/dropbear:
+            content: |
               config dropbear
-              	option PasswordAuth 'on'
+              	option PasswordAuth 'off'
               	option RootPasswordAuth 'off'
               	option Port '22000'
 
-            # TODO: mode needs to be 0600
-            /etc/dropbear/authorized_keys: |-
+          /etc/dropbear/authorized_keys:
+            mode: 0600
+            content: |-
               {% for key in noc_ssh_keys %}
               {{ key }}
               {% endfor %}