Murat ÖZDEMİR
6798426841
Centralize and manage multiple administrator SSH public keys for server access and streamline administrative tasks. This change: - Allows provisioning of multiple admin SSH keys to the `iklim` user for human access. - Adds the same admin SSH keys to the `root` user for emergency or bootstrap scenarios. - Grants the `iklim` user passwordless sudo privileges to simplify administrative operations. - Replaces the single `admin_ssh_public_key_path` variable with a list of keys, accommodating multiple administrators.
36 lines
1.4 KiB
YAML
36 lines
1.4 KiB
YAML
storagebox_account: "u469968"
|
|
storagebox_user: "{{ storagebox_account }}-sub5"
|
|
storagebox_url: "https://{{ storagebox_user }}.your-storagebox.de/"
|
|
storagebox_mount_point: "/mnt/storagebox"
|
|
storagebox_password: "{{ vault_storagebox_password }}"
|
|
storagebox_managed_directories:
|
|
- path: "{{ storagebox_mount_point }}/db"
|
|
mode: "0777"
|
|
- path: "{{ storagebox_mount_point }}/ssl"
|
|
mode: "0777"
|
|
- path: "{{ storagebox_mount_point }}/swag"
|
|
mode: "0777"
|
|
- path: "{{ storagebox_mount_point }}/swag/dns-conf"
|
|
mode: "0777"
|
|
- path: "{{ storagebox_mount_point }}/swag/site-confs"
|
|
mode: "0777"
|
|
- path: "{{ storagebox_mount_point }}/swag/proxy-confs"
|
|
mode: "0777"
|
|
- path: "{{ storagebox_mount_point }}/swag/certbot"
|
|
mode: "0777"
|
|
- path: "{{ storagebox_managed_directories_grafana_path | default(storagebox_mount_point ~ '/grafana/data') }}"
|
|
mode: "0777"
|
|
- path: "{{ storagebox_mount_point }}/precipitation/images"
|
|
mode: "0777"
|
|
|
|
iklim_password: "{{ vault_iklim_password }}"
|
|
act_runner_labels: "prod-runner:docker://catthehacker/ubuntu:act-22.04,ubuntu-24.04,{{ inventory_hostname }}"
|
|
swarm_manager_ip: "10.20.10.11"
|
|
mongodb_replset_name: "rs0"
|
|
admin_allowed_cidrs: "78.187.87.109/32 95.70.151.248/32 188.3.184.2/32"
|
|
admin_ssh_public_keys:
|
|
- "{{ lookup('file', 'files/keys/murat_ozdemir.pub') }}"
|
|
- "{{ lookup('file', 'files/keys/bimetri_dev1.pub') }}"
|
|
- "{{ lookup('file', 'files/keys/bimetri_dev2.pub') }}"
|
|
timezone: "Europe/Istanbul"
|