From 5927563551315fe97409afba38b2bea962a85dd6 Mon Sep 17 00:00:00 2001 From: dotdavid Date: Mon, 6 Jul 2026 19:15:39 +0100 Subject: [PATCH] Add passwordless SSH login for dotlaptop keys to base role Mirrors the authorized_key task already used in dotnetwork's dotserver playbook, so both partitions on this laptop can log into the meshcore nodes without a password. Co-Authored-By: Claude Sonnet 5 --- ansible/group_vars/all.yml | 4 ++++ ansible/roles/base/tasks/main.yml | 8 ++++++++ 2 files changed, 12 insertions(+) diff --git a/ansible/group_vars/all.yml b/ansible/group_vars/all.yml index 28e6473..0f1a84d 100644 --- a/ansible/group_vars/all.yml +++ b/ansible/group_vars/all.yml @@ -3,3 +3,7 @@ ansible_user: "{{ remote_user }}" ansible_become: true meshcore_description: "meshcore management" + +# Same values as dotnetwork/ansible/inventory/group_vars/all/vars.yml +ssh_pubkey_dotlaptop_lin: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJykGDnyJkOfPyzNTCaEFx5niy6kAAo/7nLzbhB9tmj2 david@datajack.org" +ssh_pubkey_dotlaptop_win: "ssh-rsa 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 david@datajack.org" diff --git a/ansible/roles/base/tasks/main.yml b/ansible/roles/base/tasks/main.yml index 1053239..49dc142 100644 --- a/ansible/roles/base/tasks/main.yml +++ b/ansible/roles/base/tasks/main.yml @@ -1,4 +1,12 @@ --- +- name: SSH — ensure current keys are authorized + ansible.posix.authorized_key: + user: "{{ remote_user }}" + key: | + {{ ssh_pubkey_dotlaptop_lin }} + {{ ssh_pubkey_dotlaptop_win }} + tags: [ssh] + - name: Install base packages apt: name: