From 9a200e11976f99e013227402be2ff2aafd3526dc Mon Sep 17 00:00:00 2001
From: Sheppy <sheppy@atlantishq.de>
Date: Tue, 23 May 2023 18:08:19 +0200
Subject: [PATCH] add: support for extra root keys & bekama key

---
 group_vars/all.yaml        | 3 +++
 group_vars/kathi.yaml      | 3 +++
 roles/base/tasks/main.yaml | 6 ++++++
 3 files changed, 12 insertions(+)

diff --git a/group_vars/all.yaml b/group_vars/all.yaml
index 9c78372..71e621d 100644
--- a/group_vars/all.yaml
+++ b/group_vars/all.yaml
@@ -7,6 +7,9 @@ nsca_password: HISTORY_PURGED_SECRET
 RSYSLOG_SERVER: internal.monitoring.atlantishq.de
 influxdb_telegraf_password: HISTORY_PURGED_SECRET
 
+extra_root_keys:
+    - "# no extra keys"
+
 smtp_internal_host: mail.atlantishq.de
 smtp_internal_host_port: 8025
 smtp_service_user: noreply
diff --git a/group_vars/kathi.yaml b/group_vars/kathi.yaml
index 8b53d53..4e14769 100644
--- a/group_vars/kathi.yaml
+++ b/group_vars/kathi.yaml
@@ -1,2 +1,5 @@
 extra_sheppy_pubkeys: |
     ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC/395VxgeExQUllcOw5n2U/6ZQoBznwNz136SLJd3B8rDUM6vFhJVIDIh3IKGCBttyIiDZtMw/XnMdxfm9/A4micFKcFnYc1/JF+clNXYRC6tX4jq8gOrDdQZkRQXrSpACt9Zm7yk7OYeVoBsOraZCfi8xnkbXiRnIi9u7HFYk01PVwbtEr+aG0PZxHBZZlng+dDi0b9DeJ115QBtW5IWBx9bwBo3utg1TcLIge5q76ioNX7B8r0aNylCOl3yw3ifui2mgiTGKe5utpl4vJV1UphUamTqFPEMm2wxFg3kppfXwdexKpoEoAR3sh/UjeKL59rs/ilzV7KIEGeOctGDI7cxEkQBsZNox2LAoVSOnNJC/TPVVYoLvJ41jYX9mlpK+AlgRdVvNZl9rR4rm06Gh7FP+UxSt/IOgZ8bW1hlbzYq18D9sT8VFxVHzxzbBtgioUnxCtnzJ61sLnQog8AyXCaqVoQ7KtyRXSUZsLpHFsDj2r3GojIMaHRG3ko7zQok= bekama
+
+extra_root_keys:
+    - ssh-rsa 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 bekama
diff --git a/roles/base/tasks/main.yaml b/roles/base/tasks/main.yaml
index 5f84136..4884a9d 100644
--- a/roles/base/tasks/main.yaml
+++ b/roles/base/tasks/main.yaml
@@ -41,3 +41,9 @@
     owner: sheppy
     group: sheppy
     mode: 0600
+
+- name: Add extra root keys
+  lineinfile:
+    path: /root/.ssh/authorized_keys
+    line: "{{ item }}"
+  loop: "{{ extra_root_keys }}"