Add ansible-managed wifi profiles for meshcore nodes

Each node now gets three NetworkManager wifi connections via a new wifi role: dotnetwork (home), dotmobile (phone hotspot, for field troubleshooting), and a host-specific deployed-location network. Credentials live in a new per-repo ansible-vault (group and host scoped), matching the pattern already used in dotnetwork. Also updates the README's Pi imaging instructions from Bookworm to Trixie, matching what the nodes actually run. Co-Authored-By: Claude Sonnet 5 <[email protected]>
2026-07-06 20:07:26 +01:00
parent 5927563551
commit a1ba1a9603
17 changed files with 111 additions and 3 deletions
@@ -7,3 +7,12 @@ meshcore_description: "meshcore management"
 # Same values as dotnetwork/ansible/inventory/group_vars/all/vars.yml
 ssh_pubkey_dotlaptop_lin: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJykGDnyJkOfPyzNTCaEFx5niy6kAAo/7nLzbhB9tmj2 [email protected]"
 ssh_pubkey_dotlaptop_win: "ssh-rsa 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 [email protected]"
+
+# WiFi networks every node joins: dotnetwork here at home, dotmobile (phone
+# hotspot) as a field-troubleshooting fallback. Nodes also join a
+# host-specific wifi_ssid_location for their deployed site (host_vars).
+wifi_ssid_dotnetwork: "dotnetwork"
+wifi_password_dotnetwork: "{{ vault_wifi_dotnetwork }}"
+
+wifi_ssid_dotmobile: "dotmobile"
+wifi_password_dotmobile: "{{ vault_wifi_dotnetwork }}"
@@ -0,0 +1,7 @@
+$ANSIBLE_VAULT;1.1;AES256
+62646238366237396536303538333838663864316631636636623131353839333332616337323363
+6164666235383139396364376566633563333765333761610a326133656635326131363939336437
+38353766633166643333333030656237383030666131363239643034316561333033626262343666
+6330326537313435320a613662303763356465643333633032646136323762313531656430613630
+31356662616265393431613634363964326663323636653266353562633732363430306638303664
+6330613766656166393636666637313735363835656635666536
@@ -0,0 +1,7 @@
+# Copy this to vault.yml and encrypt it:
+#   ansible-vault encrypt group_vars/all/vault.yml
+#
+# To edit later:
+#   ansible-vault edit group_vars/all/vault.yml
+
+vault_wifi_dotnetwork: "changeme"   # also used for dotmobile (phone hotspot) — same password