Commit 0bb57c2c authored by julian.gethmann's avatar julian.gethmann

Add SSH key and encrypt group_vars/all

* Add the SSH key as a variable
* Encrypt the file containing this variable
parent 30eb7e6a
......@@ -39,17 +39,8 @@ desktop_software:
- perl-Clipboard
- perl-Capture-Tiny
ipaserver: las101.las.kit.edu
ipaserver2: las126.las.kit.edu
sudoer:
- bernhard
- gethmann
userinstall_vars:
- {name: "gethmann", password: "$6$HEmrpe9IMPI7nwxK$7VyjN.1tf/bJ2JJUeXQa.HEK3PFB1ggUVqpvMD0M/b/Ln.8QkzSMit9xukPaNhVg4caTnQBmcn1DXVwbfCmJt."}
- {name: "bernhard", password: "$6$Q9NiWWvweGVfXXUP$6jhQWNGEs1f/RZc2aeDJ4Wv7huT5eAyW/uO0hOr8Yzi.h5Sa149LDpzp6utQI2VbnKF6O7TfpZeoKHFaNKGY51"}
admin_mail: gethmann@kit.edu
ipaserver: las126.las.kit.edu
ipaserver2: las100.las.kit.edu
ipaserver3: las101.las.kit.edu
ansible_server: las126.las.kit.edu
......@@ -58,8 +58,9 @@
authorized_key:
user: root
state: present
key: "{{ lookup('file', '/root/.ssh/id_rsa.pub') }}"
key_options: 'from={{ ansible_server }}'
key: "{{ rootkey }}"
key_options: 'from="{{ ansible_server }}"'
notify: restart sshd
- name: Enable tunnel
lineinfile:
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment