LILiK
/
lilik_playbook
5
0
Fork 0
Code Issues 0 Pull Requests 0 Releases 0 Wiki Activity
Playbooks to a new Lilik
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
351 Commits
12 Branches
967 KiB
Tree: cabcf490ff
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from 'cabcf490ff'
${ noResults }
lilik_playbook/group_vars/all.yaml.example

24 lines
678 B
Raw Normal View History

Various LXC fixes.
9 years ago
add gateway for different vlan to group_vars
8 years ago
​
​
​
group_vars/all.yaml: new example file
5 years ago
roles/ssh_server: multi key and OpenSSH v8 support Add support for OpenSSH v8 (ouput of `ssh-keygen` changed slightly) in module `ssh_cert` and use a better implementation for multiple user CA. Now we are reading user_ca from `group_vars/all.yaml`. `user_ca_keys` should be list of each allowed User CA on one host (in this way is easier to rotate CAs without reissuing keys to each user at the same time). The production CA must be the first one in the list. Host certificate will be checked only against the first CA and updated if their host key was issued from another CA in the list. For this reason now we are using a template to create `/etc/ssh/user_ca.pub` on the target, to preserve the key order. `group_vars/all.yaml.example` has been updated to reflect the new usage.
5 years ago
group_vars/all.yaml: new example file
5 years ago
​
​
​
​
​
​
​
​
​
​
​
​
set ip to bind in reverse proxy http configuration Because we are using openwrt and we would like to mantain LUCI running on it's interface we can't bind on 0.0.0.0. or 127.0.0.1 hence we must listen on a specific ip. This will set the public ip from the group vars to be the one where we listen
8 years ago
​
add domain to group_vars and use it in reverse proxy templates
8 years ago
group_vars/all.yaml: new example file
5 years ago
 
  1. ---
  2. # ip of the management vlan gateway
  3. management_gateway: 0.0.0.0
  4. # ip of the vm vlan gateway
  5. vm_gateway: 0.0.0.0
  6. # Put here the public key of the users CA.
  7. user_ca_keys:
  8.   - "ssh-ed25519 AAAA(...) Active Production key"
  9.   - "ssh-ed25519 AAAA(...) Older not-expired key"
  10. #  - "ssh-ed25519 AAAA(...) Revoked key"
  11. 

  12. # Put the TLS X.509 Subject Prefix (before OU=)
  13. ssl_subject_prefix: '/S=IT/L=Firenze/O=Example'
  14. 

  15. # Put TLS Certificate of your Root Certification Authority
  16. ssl_ca_cert: |
  17.   -----BEGIN CERTIFICATE-----
  18. 

  19.   -----END CERTIFICATE-----
  20. 

  21. # Put here the public ip for your organisation
  22. public_ip: 0.0.0.0
  23. # Put here the domain for your organisation
  24. domain: "example.com"