davidandClaude Sonnet 5
5927563551
Mirrors the authorized_key task already used in dotnetwork's dotserver playbook, so both partitions on this laptop can log into the meshcore nodes without a password. Co-Authored-By: Claude Sonnet 5 <[email protected]>
56 lines
1.1 KiB
YAML
56 lines
1.1 KiB
YAML
---
|
|
- name: SSH — ensure current keys are authorized
|
|
ansible.posix.authorized_key:
|
|
user: "{{ remote_user }}"
|
|
key: |
|
|
{{ ssh_pubkey_dotlaptop_lin }}
|
|
{{ ssh_pubkey_dotlaptop_win }}
|
|
tags: [ssh]
|
|
|
|
- name: Install base packages
|
|
apt:
|
|
name:
|
|
- screen
|
|
- pipx
|
|
- vnstat
|
|
- git
|
|
state: present
|
|
become: true
|
|
|
|
- name: Set MOTD
|
|
template:
|
|
src: motd.j2
|
|
dest: /etc/motd
|
|
owner: root
|
|
group: root
|
|
mode: "0644"
|
|
become: true
|
|
|
|
- name: Add Tailscale apt signing key
|
|
get_url:
|
|
url: https://pkgs.tailscale.com/stable/debian/bookworm.nosetup.sh
|
|
dest: /tmp/tailscale-setup.sh
|
|
mode: "0755"
|
|
when: tailscale_auth_key != ""
|
|
|
|
- name: Run Tailscale install script
|
|
shell: sh /tmp/tailscale-setup.sh
|
|
args:
|
|
creates: /usr/bin/tailscale
|
|
become: true
|
|
when: tailscale_auth_key != ""
|
|
|
|
- name: Enable and start tailscaled
|
|
systemd:
|
|
name: tailscaled
|
|
enabled: true
|
|
state: started
|
|
become: true
|
|
when: tailscale_auth_key != ""
|
|
|
|
- name: Authenticate Tailscale
|
|
shell: tailscale up --authkey {{ tailscale_auth_key }}
|
|
become: true
|
|
when: tailscale_auth_key != ""
|
|
no_log: true
|