initial: no secrets

roles/base/tasks/main.yaml

@@ -0,0 +1,49 @@
+- name: Install packages
+  apt:
+    pkg:
+        - rsync
+        - zsh
+        - net-tools
+        - tcpdump
+        - git
+        - apt-file
+
+- name: Ensure Opt dir exists and accessible
+  file:
+    name: /opt/
+    state: directory
+    mode: 0711
+
+- name: Ensure backup info dir exists and accessible
+  file:
+    name: /opt/backup-info/
+    state: directory
+    mode: 0700
+
+- name: Copy Backup Helper script
+  copy:
+    src: check_dir_size_for_backup.py
+    dest: /opt/check_dir_size_for_backup.py
+    mode: 0755
+
+- name: Create sheppy .ssh dir
+  file:
+    path: /home/sheppy/.ssh/
+    state: directory
+    owner: sheppy
+    group: sheppy
+    mode: 0700
+
+- name: Template Sheppy authorized keys
+  template:
+    src: authorized_keys_sheppy.j2
+    dest: /home/sheppy/.ssh/authorized_keys
+    owner: sheppy
+    group: sheppy
+    mode: 0600
+
+- name: Add extra root keys
+  lineinfile:
+    path: /root/.ssh/authorized_keys
+    line: "{{ item }}"
+  loop: "{{ extra_root_keys }}"

roles/base/templates/authorized_keys_sheppy.j2

@@ -0,0 +1,3 @@
+ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDoUijFwmZaYHbueDsa3T2BV5UfMxKpztbuJwSBZ5s0WbZlg/9E9SHeGztaN/SCyQZdtOA7bR6tQMWhx4fadvrjg5BrN1bjpNUb2/rAxuWw0yU0Yp2CWwE02m+3bMj4pXeaI2Mk/Ywubfl88W2/OrUpbhHoYeedAIblyzuOwDTS9MpjD/ita89d4CM9AdhGBw3qaggtIxD8A5hULbJWe0D5KdtBFG8RFOmBaEb/tmBvdpwja3i17/AejUdjfjQv8G3BSTbKvOvMRwmnmoE5YCstwHIFqrlmqorSGQIVo5knfcSqgFxs2wDv4OOrPJTWcmr3LmN5lVjHkjtzRQ8zE9sB sheppy-master
+ssh-rsa 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 hypervisor
+{{ extra_sheppy_pubkeys }}