Graham McIntire
fb5803c866
- bootstrap.yml: support pkg for FreeBSD sudo/python3 install - base role: FreeBSD package sets, sudoers paths, host key regen, admin group, usermod process-in-use tolerance - freebsd role: pkg update/upgrade tasks - general role: standalone hostname tasks (ungated from network.skip), hostname_override support - inspircd role: deploy configs for ca/us manero.org irc servers with vault-backed secrets - uisp role: download and run installer on fresh hosts, skip if already running - netbox role: stop services before usermod to avoid process-in-use failures - hosts: add irc_servers group, ca/us.manero.org (Tailscale), drop staging.towerops.net - all.yml: graham user gets static ed25519 key alongside github keys
65 lines
1.6 KiB
YAML
65 lines
1.6 KiB
YAML
---
|
|
# Global variables for all hosts
|
|
|
|
# SSH key for Ansible connections - override per-host if needed
|
|
ansible_ssh_private_key_file: "{{ lookup('env', 'ANSIBLE_SSH_PRIVATE_KEY_FILE') | default('~/.ssh/ansible', true) }}"
|
|
|
|
# Tailscale auth key - set via TAILSCALE_AUTHKEY env var
|
|
tailscale_authkey: "{{ lookup('env', 'TAILSCALE_AUTHKEY') | default(lookup('env', 'TAILSCALE_KEY'), true) }}"
|
|
|
|
# Timezone configuration
|
|
timezone: America/Chicago
|
|
|
|
# Managed groups and users
|
|
managed_groups:
|
|
- name: ansible
|
|
gid: 10001
|
|
|
|
managed_users:
|
|
- name: ansible
|
|
uid: 10001
|
|
shell: /bin/bash
|
|
home: /home/ansible
|
|
primary_group: ansible
|
|
authorized_keys:
|
|
- type: file
|
|
value: ansible.pub
|
|
exclusive: true
|
|
- name: graham
|
|
shell: /bin/bash
|
|
home: /home/graham
|
|
admin: true
|
|
authorized_keys:
|
|
- type: github
|
|
value: gmcintire
|
|
- type: string
|
|
value: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEEKtgXwoW8HZGqC+KJok9iNpI/lK4glvoryL4Ng/AL+"
|
|
- name: andy
|
|
shell: /bin/bash
|
|
home: /home/andy
|
|
admin: true
|
|
authorized_keys:
|
|
- type: github
|
|
value: nsnw
|
|
|
|
# Base settings
|
|
base:
|
|
ntp:
|
|
server: 0.us.pool.ntp.org
|
|
monitoring:
|
|
cert_dir: /var/lib/icinga2/certs
|
|
server: monitor.vntx.net
|
|
|
|
# SSH service name (varies by distribution)
|
|
ssh_service: "{{ 'ssh' if ansible_facts['os_family'] == 'Debian' else 'sshd' }}"
|
|
|
|
# NTP service name (varies by distribution)
|
|
ntp_service: "{{ 'ntp' if ansible_facts['os_family'] == 'Debian' else 'ntpd' }}"
|
|
|
|
# Network configuration - skip for all hosts
|
|
network:
|
|
skip: true
|
|
nameservers:
|
|
- 9.9.9.9
|
|
- 149.112.112.112
|
|
domain: local
|