admin/skato-ansible
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects 3 Releases Wiki Activity

changed SSH key queries to dedicated SSH keys, and automated password creation, for staging; removed token to be prompted instead

Browse Source
This commit is contained in:
xenobyte
2026-06-17 14:39:10 -04:00
parent 13ef8fa459
commit 596b828e6f
2 changed files with 15 additions and 54 deletions
Download Patch File Download Diff File Expand all files Collapse all files

29
group_vars/armitage_test.yml
View File

@@ -1,12 +1,6 @@
# @TODO create inventory group variables akin to structure of sukaato group's for homeserver # @TODO create inventory group variables akin to structure of sukaato group's for homeserver
# <str<vault>> representing password for Linux root user account of VPS # <str<vault>> representing password for Linux root user account of VPS
password: !vault | password: "{{ lookup('password', '../.tmp/armitage_test.pass', seed='armitage_test') }}"
$ANSIBLE_VAULT;1.1;AES256
32333335343939653231313938666134306338356633393035363039373465386165313666383262
6465313738316635633332623765336563626165336330370a616634393266366430363663333066
63373165346236386632393866316164623133373761303262643734356433646661636533666266
3834643765613937300a326365643961626236386261303933643965333565623836313231346537
3030
# <str> representing hostname for LAN server; same as host or group variable name # <str> representing hostname for LAN server; same as host or group variable name
instance: armitage instance: armitage
# <str<enum>> representing Linux distro or OS image to be used for VPS # <str<enum>> representing Linux distro or OS image to be used for VPS
@@ -14,28 +8,19 @@ instance: armitage
operating_system: ~ operating_system: ~
# <list[<str>]> of control node or local SSH key basenames # <list[<str>]> of control node or local SSH key basenames
ssh_keys: ssh_keys:
- ed25519@sukaato.hikiki - ed25519@staging
- ecdsa@sukaato.hikiki - ecdsa@staging
# <list<dict>> list of administrative users (in Linux, users that can use "sudo") # <list<dict>> list of administrative users (in Linux, users that can use "sudo")
admins: admins:
- username: senpai # <str> arbitrary valid user name - username: senpai # <str> arbitrary valid user name
services: ~ # <list[<str>]> if linux system user, assocated servce services: ~ # <list[<str>]> if linux system user, assocated servce
# <list[<str>]> list of control node or local SSH key basenames for this user # <list[<str>]> list of control node or local SSH key basenames for this user
ssh_keys: ssh_keys:
- ecdsa-37851076-sk@sukaato.hikiki # @TODO add secondary and teriary Yubikeys
- ecdsa-37851072-sk@sukaato.hikiki - ecdsa-37851076-sk@staging
- ed25519-37851076-sk@staging
# <str<vault?>> hashed (and maybe salted) password # <str<vault?>> hashed (and maybe salted) password
password: !vault | password: "{{ lookup('password', '../.tmp/armitage_test.pass', seed='senpai:armitage_test') }}"
$ANSIBLE_VAULT;1.1;AES256
34636132613365646330653431653236303563623464316638643439373761366564663264613738
3033343264373264333362616434333465323439653134340a643066663832353965313434386639
38366263646638353632656431366638393939623537326233306132306436363338373161643433
3439653833333164390a303430616561356464393030353433303738383730643330323031373432
62386231653339616436383837383966643539353036353034363132633539643332386131613537
31356230383561663735363530393562363237343166323635666665386165633130653864646238
39323735386161646531323335393639353630376136663063393930326434346435343937623336
33336132663238326662323536326638333139313535373166636363336366663962373936383536
62303536363939316563646630633064306364366331623665646533633065336236
# <dict[<str>:<dict>]> package groups # <dict[<str>:<dict>]> package groups
pkgs: pkgs:
# <dict[<str>:<dict>]> representing package groups installed by package manager via repositories # <dict[<str>:<dict>]> representing package groups installed by package manager via repositories

40
group_vars/sukaato_test.yml
View File

@@ -1,22 +1,7 @@
# <str<vault>> representing password for Linux root user account of VPS # <str<vault>> representing password for Linux root user account of VPS
password: !vault | password: "{{ lookup('password', '../.tmp/sukaato_test.pass', seed='sukaato_test') }}"
$ANSIBLE_VAULT;1.1;AES256
66353462633933306537323461663665643234306166366663653163306436333037313032306338
3762653037396437633835356630656438623163656536310a306163663234383265386133396634
34363163343766623739646334643031373239373630663731376239333764346531396363636131
6163343335356337660a366337336632333236326532373032353332333636366638616265356562
66616534303035386134623535373935373065326539363065623230633034313433
# <str<vault>> representing API token for VPS cloud service # <str<vault>> representing API token for VPS cloud service
token: !vault | token: ~
$ANSIBLE_VAULT;1.1;AES256
33333839333337323062326231626534616166646666343261343966636464346630363033653130
3035653864396363376633346362353239643939663462370a323935353061313563336435366331
30393463653661326539326234646438663133616634663439303932656137633839656533376433
3666643635613039390a323138393033623131326438616331386539666333613630316263613636
66663263373665343662393638623064356234646165343835623966643761333562323132396466
63363436333463653130323531343139316466316131313031343232343039396261616231376232
66383938333661363532303166306563396634663132396166646132663131373738396131626633
34393265343061356531
# <str> representing name and hostname of VPS to be made in VPS cloud service # <str> representing name and hostname of VPS to be made in VPS cloud service
instance: sukaato instance: sukaato
# <str<enum>> representing region options from or for given VPS cloud service # <str<enum>> representing region options from or for given VPS cloud service
@@ -25,28 +10,19 @@ origin: us-east
operating_system: linode/debian13 operating_system: linode/debian13
# <list[<str>]> list of control node or local SSH key basenames for root user # <list[<str>]> list of control node or local SSH key basenames for root user
ssh_keys: ssh_keys:
- ed25519@sukaato.hikiki - ed25519@staging
- ecdsa@sukaato.hikiki - ecdsa@staging
# <list<dict>> list of administrative users (in Linux, users that can use "sudo") # <list<dict>> list of administrative users (in Linux, users that can use "sudo")
admins: admins:
- username: senpai # <str> arbitrary valid user name - username: senpai # <str> arbitrary valid user name
services: ~ # <list[<str>]> if linux system user, assocated servce services: ~ # <list[<str>]> if linux system user, assocated servce
# <list[<str>]> list of control node or local SSH key basenames for this user # <list[<str>]> list of control node or local SSH key basenames for this user
ssh_keys: ssh_keys:
- ecdsa-37851076-sk@sukaato.hikiki # @TODO add secondary and teriary Yubikeys
- ecdsa-37851072-sk@sukaato.hikiki - ecdsa-37851076-sk@staging
- ed25519-37851076-sk@staging
# <str<vault?>> hashed (and maybe salted) password # <str<vault?>> hashed (and maybe salted) password
password: !vault | password: "{{ lookup('password', '../.tmp/sukaato_test.pass', seed='senpai:sukaato_test') }}"
$ANSIBLE_VAULT;1.1;AES256
31663265653031323833373663653132653532646638316465393364613961643130653330393062
6165386239303965386261363565353137636164356130370a336465353931373564393339363561
37353162333331663833656631663165356134633961323337663439663733316231666334336539
6537373334326634610a623037613462663733343230306538386561363838316638623365636533
32313931666439363435663161663665346266653763343265376366383837376436643163376430
39393861613037333766386138376335653334363737626664383236303234653461313230383564
33393834636165386562383435666233313664656233326364616237636230303264363732376639
64396564366335366430303031323865333635306536346463386334303235386438663061343934
37376466373566396130366330383834323332626166316661336339346462343466
# <dict[<str>:<dict>]> package groups # <dict[<str>:<dict>]> package groups
pkgs: pkgs:
# <dict[<str>:<dict>]> representing package groups installed by package manager via repositories # <dict[<str>:<dict>]> representing package groups installed by package manager via repositories