diff --git a/roles/config/handlers/main.yml b/roles/config/handlers/main.yml new file mode 100644 index 0000000..62f97ca --- /dev/null +++ b/roles/config/handlers/main.yml @@ -0,0 +1,5 @@ +- name: Reload dropbear + service: + name: dropbear + state: reloaded + enabled: yes diff --git a/roles/config/meta/main.yml b/roles/config/meta/main.yml new file mode 100644 index 0000000..8cc4ed6 --- /dev/null +++ b/roles/config/meta/main.yml @@ -0,0 +1,2 @@ +dependencies: + - role: gekmihesg.openwrt diff --git a/roles/config/tasks/main.yml b/roles/config/tasks/main.yml new file mode 100644 index 0000000..94ea4ae --- /dev/null +++ b/roles/config/tasks/main.yml @@ -0,0 +1,41 @@ +- name: Setup hostname + when: inventory_hostname is defined + uci: + command: set + key: 'system.@system[0]' + value: + hostname: "{{ inventory_hostname }}" + +- name: Setup timezone + uci: + command: set + key: 'system.@system[0]' + value: + timezone: "{{ timezone | default(system[template | default('default')].timezone) }}" + zonename: "{{ zonename | default(system[template | default('default')].zonename) }}" + +- name: commit changes + uci: + command: commit + key: system + +- name: Update authorized keys + lineinfile: + path: /etc/dropbear/authorized_keys + line: "{{ lookup('file', '/home/' + lookup('env', 'USER') + '/.ssh/id_ed25519.pub') }}" + state: present + create: yes + +- name: Disable Root password authentication + uci: + command: set + key: "dropbear.@dropbear[0]" + value: + RootPasswordAuth: "off" + PasswordAuth: "off" + notify: reload dropbear + +- name: Commit changes + uci: + command: commit + key: dropbear diff --git a/roles/config/vars/main.yml b/roles/config/vars/main.yml new file mode 100644 index 0000000..90e2f0a --- /dev/null +++ b/roles/config/vars/main.yml @@ -0,0 +1,5 @@ +system: + + default: &default_system + timezone: 'EST5EDT,M3.2.0,M11.1.0' + zonename: 'America/New York'