mirror of
https://github.com/fscotto/infra.git
synced 2026-09-27 11:02:47 +00:00
160d63c02d
* Add Atlas media and storage services * Document Atlas backend phase one and WireGuard deployment * Enable Atlas NAS management and document bootstrap workflow * Harden Atlas network, SSH, firewall, and sharing * Rotate Ansible Vault secrets * Allow configurable Aegis SSH users and authorized keys * Manage Aegis SSH authorized key fragments * Manage SSH authorized key fragments for infrastructure hosts * Harden Rocky storage and sharing configuration * Verify WireGuard handshakes and restore Podman networking
21 lines
741 B
YAML
21 lines
741 B
YAML
---
|
|
ansible_host: aegis
|
|
ansible_connection: ssh
|
|
ansible_user: pi
|
|
ansible_become: true
|
|
ansible_python_interpreter: /usr/bin/python3
|
|
# Avoid PTY framing around module JSON on this remote Fedora IoT host.
|
|
ansible_ssh_use_tty: false
|
|
|
|
aegis_lan_subnet: 192.168.178.0/24
|
|
aegis_adguard_web_port: 80
|
|
aegis_ssh_authorized_keys:
|
|
- name: ikaros
|
|
key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINrIxXjA3ffPwziKGR5gzc4gAoBehQPlnEMcXF4Wl0ZS ikaros"
|
|
- name: nymph
|
|
key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEH/7GJfGt0ZVmKeEzceoFkFkeCXFryKK9vAbaip+HCx nymph"
|
|
- name: siren
|
|
key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA95wYlzpfN3rjUhpMeP4KHn8I6ZrjQXoDTgwgRIa++b siren"
|
|
|
|
aegis_icloudpd_apple_id: "{{ vault_aegis_icloudpd_apple_id | default('') }}"
|