From 3324461e653b3d6c53a4f7b0c9d503fe54a99265 Mon Sep 17 00:00:00 2001 From: Felix Stupp Date: Wed, 11 Sep 2019 20:39:11 +0200 Subject: [PATCH] account: Added config for authorized_keys --- group_vars/all/vars.yml | 2 ++ roles/account/tasks/main.yml | 17 +++++++++++++++++ site.yml | 1 + 3 files changed, 20 insertions(+) diff --git a/group_vars/all/vars.yml b/group_vars/all/vars.yml index 3e66ca7..03c6e23 100644 --- a/group_vars/all/vars.yml +++ b/group_vars/all/vars.yml @@ -7,6 +7,8 @@ ansible_user: zocker ansible_become: yes ansible_become_pass: "{{ zocker_password }}" +zocker_authorized_keys_url: "https://git.banananet.work/zocker.keys" + update_scripts_directory: "/root/update" backup_gpg_fingerprint: "73D09948B2392D688A45DC8393E1BD26F6B02FB7" diff --git a/roles/account/tasks/main.yml b/roles/account/tasks/main.yml index 2135105..1c1b55d 100644 --- a/roles/account/tasks/main.yml +++ b/roles/account/tasks/main.yml @@ -37,6 +37,23 @@ group: "{{ username }}" mode: "u=rwx,g=rx,o=" +- name: Configure ssh configration directory + file: + path: "{{ user_directory }}/.ssh" + state: directory + owner: "{{ username }}" + group: "{{ username }}" + mode: "u=rwx,g=rx,o=" + +- name: Configure authorized_keys + get_url: + url: "{{ authorized_keys }}" + dest: "{{ user_directory }}/.ssh/authorized_keys" + force: yes + owner: "{{ username }}" + group: "{{ username }}" + mode: "u=rwx,g=rx,o=" + - name: Download oh-my-zsh for user {{ username }} become_user: "{{ username }}" git: diff --git a/site.yml b/site.yml index 7b16706..295c982 100644 --- a/site.yml +++ b/site.yml @@ -44,6 +44,7 @@ - role: account username: "zocker" password: "{{ zocker_password }}" + authorized_keys: "{{ zocker_authorized_keys_url }}" sudo: yes - name: Install wireguard vpn