# vim: ft=yaml.ansible
---
hostname: cpx
timezone: Europe/Berlin

users:
  - name: sysadm
    comment: System Administration
    password: $6$Q2WHaFPAPgndQSz4$F6py94HemVpE/cgtTU0cRKkI/Si5Vjl/aSCniVr8WtbkViBOtt.dpDDWwhjbOOX/o6R22w1tFiciBmF.UA9HH0
    groups:
      - sudo
    ssh_keys:
      - sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIFWZGLov8wPBNxuvnaPK+8vv6wK5hHUVEFzXKsN9QeuBAAAADHNzaDpzYW1zYXB0aQ== ssh:samsapti
      - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPd/4fQV7CL8/KVwbo/phiV5UdXFBIDlkZ+ps8C7FeRf cardno:14 336 332

  - name: cicd
    comment: CI/CD user
    password: '!'
    groups: []
    ssh_keys:
      - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBN7XhL364LZ4rnEnmpV59Qehw3ldqEb7XX5DWTAb/XH cicd
      - sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIFWZGLov8wPBNxuvnaPK+8vv6wK5hHUVEFzXKsN9QeuBAAAADHNzaDpzYW1zYXB0aQ== ssh:samsapti
      - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPd/4fQV7CL8/KVwbo/phiV5UdXFBIDlkZ+ps8C7FeRf cardno:14 336 332

open_ports:
  - { port: '22', proto: 'tcp', comment: 'SSH' }
  - { port: '80', proto: 'tcp', comment: 'HTTP' }
  - { port: '443', proto: 'tcp', comment: 'HTTPS' }
  - { port: '5223', proto: 'tcp', comment: 'SMP server' }
  - { port: '5443', proto: 'tcp', comment: 'XFTP server' }
  - { port: '10000', proto: 'udp', comment: 'Jitsi Videobridge' }