mirror of
https://github.com/CPunch/openpunk-ansible.git
synced 2024-11-14 20:00:05 +00:00
CPunch
abaa4c9639
- all tasks/* have been moved to their own roles in roles/* - each file && template is now oragnized per-role - annotated each task which still isn't idempotent !TODO!
37 lines
989 B
YAML
37 lines
989 B
YAML
---
|
|
- name: Setup git config
|
|
copy:
|
|
src: .gitconfig
|
|
dest: /root/.gitconfig
|
|
owner: root
|
|
mode: u=rw,g=,o=
|
|
|
|
# make sure our vps trusts the github.com key signature. we pipe the output
|
|
# of ssh-keyscan into .ssh/known_hosts
|
|
|
|
# TODO: make idempotent
|
|
- name: Scan for SSH host keys
|
|
command: ssh-keyscan github.com 2>/dev/null
|
|
register: ssh_scan
|
|
|
|
- name: Update known_hosts
|
|
copy:
|
|
content: "{{ ssh_scan.stdout_lines|join('\n') }}"
|
|
dest: /root/.ssh/known_hosts
|
|
owner: root
|
|
mode: u=rw,g=,o=
|
|
force: no # if we already have a known_hosts file, ignore!
|
|
|
|
# this keypair is trusted under my github account, so it allows my vps to make pushes
|
|
# to the main branch of my openpunk repository. (for my deadswitch: see static/blog/imdead.sh)
|
|
|
|
- name: Install ssh priv key
|
|
copy:
|
|
src: secrets/id_ed25519
|
|
dest: /root/.ssh/id_ed25519
|
|
mode: u=rw,g=,o=
|
|
|
|
- name: Install ssh pub key
|
|
copy:
|
|
src: secrets/id_ed25519.pub
|
|
dest: /root/.ssh/id_ed25519.pub |