- replace inventory/dmc12.yml with cloudlorean.yml (+ group_vars) and update all README/AGENTS call examples and the inventory table - move admin_password hash into encrypted vault.yml; remove plaintext copies from roles/bootstrap/defaults and group_vars/external.yml - bootstrap.yml loads vault.yml via vars_files (same pattern as monitoring) - monitoring: PSK config/registration updates, docker role defaults, os-updates logging/reboot refinements, ansible.cfg/execute.sh tweaks - add .project-wiki knowledge base and .github agent instructions
14 lines
681 B
YAML
14 lines
681 B
YAML
---
|
|
# SSH authorized keys for admin user
|
|
# Format: key and optional comment
|
|
admin_authorized_keys:
|
|
- key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL/XwF0Na+YH7lRqGtwEcyIMVGTQZetNDrC9sZ8ofjC5 niklas@Linkman-PC"
|
|
comment: "Niklas - Linkman-PC"
|
|
- key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINPHSP1qvaoJDwMtka6UV9aOw24cKHBOa2Eyx7JBmhEg dennis@DESKTOP-V99ARL9"
|
|
comment: "Dennis - DESKTOP-V99ARL9"
|
|
- key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA+EvtGavPlXfv7b00jSYsXX2+IEsqFWupEs6Rzf5z9q root@ansible"
|
|
comment: "Generic Ansible Key"
|
|
|
|
# admin_password lives encrypted in vault.yml (loaded via vars_files in
|
|
# bootstrap.yml); no plaintext fallback per repository vault policy.
|