Add ssl_certs_enabled variable and use it to avoid ssl certs when running on vagrant

Remove state: latest
Naming changes
2022-11-15 22:06:53 +00:00 · 2022-11-15 22:06:53 +00:00 · 2022-11-15 22:06:53 +00:00 · 2022-11-15 22:06:53 +00:00 · 2022-11-15 22:06:53 +00:00 · 2022-11-15 22:06:53 +00:00
2 changed files with 13 additions and 17 deletions
--- a/group_vars/all/vars.yml
+++ b/group_vars/all/vars.yml
@ -4,14 +4,14 @@ users:
    comment: Jesper Hess Nielsen
    password: '!'
    groups: []
-    keys: []
+    ssh_keys: []

  - name: valberg
    comment: Vidir Valberg Gudmundsson
    password: $6$qt3G.E.CxhC$OwBDn4rZUbCz06HLEMBHjgvKjxiv/eeerbklTHi.gpHIn1OejzX3k2.0NM0Dforaw6Yn5Y8Cgn8kL2FdbQLZ3/
    groups:
      - sudo
-    keys:
+    ssh_keys:
      - ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUmGeHc6QXDcJHkmVxbTUv04Q3vs20avquoGr6eOkkvYbcgjuFnBOOtvs2Nul1odcvvnHa1nN7DfL8XJamiwsB1B/xe2seaNS1axgwk9XowlVN9pgga8gsC+4gZWBtSObG2GR8n4NtPENzPmW5deNn8dRpTvULPMxZ0VRE9yNQOx8v8w85yYh+vxbbkWGVDYJU23yuJI50U9y6bXxNHinsACDFBeR/giXDlw29TaOaSxz0R6zrRPBoX+V68RyWwBL+KWQKtX2ULtJI40S98Ohd6p41bIxYHCBS/zroqNne8PjYOLcHHsjHUGfTvhcS5a3zdz/iHsvsaOOjFjsydAXH valberg

  - name: reynir
@ -19,7 +19,7 @@ users:
    password: $6$MiPv.ZFlWnLHGNOb$jdQD9NaPMRUGaP2YHRJNwrMPBGl9qwK0HFhI6x51Xpn7hdzuC4GIwvOw1DJK33sNs/gGP5bWB0izviXkDcq7B0
    groups:
      - sudo
-    keys:
+    ssh_keys:
      - ssh-rsa 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 reynir yubikey
      - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPR8t/wNRp7Dt3wr9uZKVTofTDVYrcoQNru5ETxL+37t reynir@spurv

@ -28,7 +28,5 @@ users:
    password: $6$18dN367fG162hQ9A$Aqkf3O24Ve1btzh1PPOPg3uyydv/AQYUxethcoB4klotebJq3/XsydYT7XBuarxfDccVwyPTMlsP3U8VfQpG60
    groups:
      - sudo
-    keys:
+    ssh_keys:
      - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPd/4fQV7CL8/KVwbo/phiV5UdXFBIDlkZ+ps8C7FeRf samsapti
-
-volume_root_folder: "/docker-volumes"
--- a/roles/ubuntu_base/tasks/users.yml
+++ b/roles/ubuntu_base/tasks/users.yml
@ -4,22 +4,20 @@
    name: "{{ item.name }}"
    comment: "{{ item.comment }}"
    password: "{{ item.password }}"
-    update_password: "on_create"
-    groups:  "{{ item.groups }}"
+    groups: "{{ item.groups }}"
+    update_password: "always"
  loop: "{{ users | default([]) }}"

 - name: "Add ssh authorized_keys"
  authorized_key:
-    user: "{{ item.0.name }}"
-    key: "{{ item.1 }}"
-  with_subelements:
-  - "{{ users | default([]) }}"
-  - keys
+    user: "{{ item.name }}"
+    key: "{{ item.ssh_keys | join('\n') }}"
+    exclusive: true
+  loop: "{{ users | default([]) }}"

 - name: "Add ssh authorized_keys to root user"
  authorized_key:
    user: "root"
-    key: "{{ item.1 }}"
-  with_subelements:
-  - "{{ users | default([]) }}"
-  - keys
+    key: "{{ item.ssh_keys | join('\n') }}"
+    exclusive: true
+  loop: "{{ users | default([]) }}"
Author	SHA1	Message	Date
Víðir Valberg Guðmundsson	253a21432e	Add ssl_certs_enabled variable and use it to avoid ssl certs when running on vagrant	2022-11-15 22:06:53 +00:00
Sam A.	a6cb0a8e65	Remove state: latest	2022-11-15 22:06:53 +00:00
Sam A.	c676d69fc0	Naming changes	2022-11-15 22:06:53 +00:00
Sam A.	c74cc4413a	Simplify config and rename some files	2022-11-15 22:06:53 +00:00
Sam A.	50fa65d55e	Don't use local config for Docker registry login It doesn't work when deploying in Vagrant :(	2022-11-15 22:06:53 +00:00
Sam A.	eeecfca7ef	Vagrant: Use same Ubuntu version as in production	2022-11-15 22:06:53 +00:00
Sam A.	1744cf7585	Fix SSH port logic again	2022-11-15 22:06:53 +00:00
Sam A.	b310e191f8	Some Vagrant fixes Only install Dell OpenManage if not running in a VM, and fix SSH port logic.	2022-11-15 22:06:53 +00:00
Sam A.	b56690a33e	Make Ansible setup testable in Vagrant Added logic to change the sshd port if not already configured, configued Vagrantfile to work properly and fixed a couple of deploy errors.	2022-11-15 22:06:53 +00:00
Sam A.	52ead4fee5	Remove volume_root_folder from vars.yml It is defined later in the docker role already.	2022-11-15 20:52:38 +01:00
Sam A.	ba44677cf3	Avoid conflicts with built-in function name keys	2022-11-15 20:28:34 +01:00
Sam A.	fc0c0c5036	Always update password and overwrite keys	2022-11-15 19:57:17 +01:00