- base: Tailscale's per-codename .nosetup.sh install scripts are gone (404); switch to the universal tailscale.com/install.sh, and split install/enable (always) from auth (only when a key is given) so a node without an authkey still gets Tailscale installed, just not authenticated. - meshcore_capture: the current upstream installer (v2.0.0+, what a fresh install now produces) uses a completely different layout than dm-baldock/dm-ashwell's older flat ~/.meshcore-packet-capture setup — dedicated system user, /opt + /etc/meshcore-packet-capture, config.d/*.toml, meshcore-packet-capture.service. Added meshcore_capture_layout (system/legacy) so the role targets the right paths/service name per host without touching the two working legacy nodes. New 99-user.toml.j2 replicates the old MQTT broker coverage (letsmesh us/eu, meshrank, ukmesh, meshmapper) in the new config.d override format. - dm-edworth: fill in serial_port now that the MeshCore device is connected; confirmed running and publishing to all 5 brokers. - README: fix broken list formatting, document the installer's required manual step and why. Co-Authored-By: Claude Sonnet 5 <[email protected]>
53 lines
1.0 KiB
YAML
53 lines
1.0 KiB
YAML
---
|
|
- name: SSH — ensure current keys are authorized
|
|
ansible.posix.authorized_key:
|
|
user: "{{ remote_user }}"
|
|
key: |
|
|
{{ ssh_pubkey_dotlaptop_lin }}
|
|
{{ ssh_pubkey_dotlaptop_win }}
|
|
tags: [ssh]
|
|
|
|
- name: Install base packages
|
|
apt:
|
|
name:
|
|
- screen
|
|
- pipx
|
|
- vnstat
|
|
- git
|
|
state: present
|
|
become: true
|
|
|
|
- name: Set MOTD
|
|
template:
|
|
src: motd.j2
|
|
dest: /etc/motd
|
|
owner: root
|
|
group: root
|
|
mode: "0644"
|
|
become: true
|
|
|
|
- name: Download Tailscale install script
|
|
get_url:
|
|
url: https://tailscale.com/install.sh
|
|
dest: /tmp/tailscale-install.sh
|
|
mode: "0755"
|
|
|
|
- name: Run Tailscale install script
|
|
shell: sh /tmp/tailscale-install.sh
|
|
args:
|
|
creates: /usr/bin/tailscale
|
|
become: true
|
|
|
|
- name: Enable and start tailscaled
|
|
systemd:
|
|
name: tailscaled
|
|
enabled: true
|
|
state: started
|
|
become: true
|
|
|
|
- name: Authenticate Tailscale
|
|
shell: tailscale up --authkey {{ tailscale_auth_key }}
|
|
become: true
|
|
when: tailscale_auth_key != ""
|
|
no_log: true
|