---
hostname: ikaros

host_packages:
  - openssh-client
  - openssh-server
  - mesa-vulkan-drivers
  - xserver-xorg-video-amdgpu

host_ufw_rules:
  - rule: allow
    port: "22"
    proto: tcp
    src: "192.168.0.0/24"

host_sshd_settings:
  PermitRootLogin: "no"
  PubkeyAuthentication: "yes"
  PasswordAuthentication: "no"
  KbdInteractiveAuthentication: "no"

host_sshd_allow_users:
  - "{{ username }}"

host_authorized_ssh_keys: "{{ vault_ikaros_authorized_ssh_keys | default([]) }}"

host_enabled_services:
  - ssh