ansible/server_flatcar_deprecated_2.../server.yaml

61 lines
1.7 KiB
YAML
Raw Permalink Normal View History

2023-01-03 20:07:56 +01:00
passwd:
users:
- name: core
ssh_authorized_keys:
- ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu66CgHoF+v1z5ydpu0SJzPuAa0eARLLggMAJY4vWcLfLTTlFjwPpO9kjkr4acUL5uLHZkAFqXQZC91io80bIfyBiM1i1yBq290x8sETgoNHrNzvcCQUBAeCxhcogi68F14BbpwBbejDTPKKybpuuAnVPj9YiHVFEDbqjLwoEY+HH7SkCsrK8qTyp9rHzwPGk0xPBwTnCPXqzvUCr/4H+m/5lamVIOW6XYoqnvAp5jP0mbadrmB0PwvK8cfgwPJWQeLJcqwl87mwHjjlrCinkpQbd2D8mR798bGmW/iTZ7GLCkyBNE34qKg24CzE0scWjqyWICXOrTYUXLORDt99/F martin@Laptop
systemd:
units:
- name: media-passport4.mount
enable: true
contents: |
[Unit]
Before=local-fs.target
[Mount]
What=/dev/disk/by-label/MartinsPassport4
Where=/media/passport4
Type=btrfs
[Install]
WantedBy=local-fs.target
- name: media-passport5.mount
enable: true
contents: |
[Unit]
Before=local-fs.target
[Mount]
What=/dev/disk/by-label/MartinsPassport5
Where=/media/passport5
Type=btrfs
[Install]
WantedBy=local-fs.target
storage:
filesystems:
- name: filesystem1
mount:
device: /dev/disk/by-partlabel/ROOT
format: btrfs
wipe_filesystem: true
label: ROOT
files:
- path: /etc/hostname
filesystem: root
mode: 0644
contents:
inline: server
- path: /etc/ssh/sshd_config
filesystem: root
mode: 0600
contents:
inline: |
# Use most defaults for sshd configuration.
UsePrivilegeSeparation yes
PermitRootLogin no
AllowUsers core
AuthenticationMethods publickey
locksmith:
window_start: "Sat 3:00"
window_length: "2h"