feat: Setup hostname, timezone, and secure sshd

This commit is contained in:
Martin Kennedy 2022-12-11 15:57:58 -05:00
parent 5d193970bc
commit e05b253210
4 changed files with 53 additions and 0 deletions

View File

@ -0,0 +1,5 @@
- name: Reload dropbear
service:
name: dropbear
state: reloaded
enabled: yes

View File

@ -0,0 +1,2 @@
dependencies:
- role: gekmihesg.openwrt

View File

@ -0,0 +1,41 @@
- name: Setup hostname
when: inventory_hostname is defined
uci:
command: set
key: 'system.@system[0]'
value:
hostname: "{{ inventory_hostname }}"
- name: Setup timezone
uci:
command: set
key: 'system.@system[0]'
value:
timezone: "{{ timezone | default(system[template | default('default')].timezone) }}"
zonename: "{{ zonename | default(system[template | default('default')].zonename) }}"
- name: commit changes
uci:
command: commit
key: system
- name: Update authorized keys
lineinfile:
path: /etc/dropbear/authorized_keys
line: "{{ lookup('file', '/home/' + lookup('env', 'USER') + '/.ssh/id_ed25519.pub') }}"
state: present
create: yes
- name: Disable Root password authentication
uci:
command: set
key: "dropbear.@dropbear[0]"
value:
RootPasswordAuth: "off"
PasswordAuth: "off"
notify: reload dropbear
- name: Commit changes
uci:
command: commit
key: dropbear

View File

@ -0,0 +1,5 @@
system:
default: &default_system
timezone: 'EST5EDT,M3.2.0,M11.1.0'
zonename: 'America/New York'