CroneKorkN
8a70691fea
Every linux node gets the user with the ssh-grant agent key and passwordless sudo; the key only works while a grant is active. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01RywMtsL8qXG7GDY3MHq9Uh
66 lines
1.7 KiB
Python
66 lines
1.7 KiB
Python
{
|
|
'supergroups': [
|
|
'all',
|
|
],
|
|
'bundles': [
|
|
'hostname',
|
|
'hosts',
|
|
'htop',
|
|
'linux',
|
|
'locale',
|
|
'network',
|
|
'ssh',
|
|
'sudo',
|
|
'system',
|
|
'systemd',
|
|
'systemd-journald',
|
|
'systemd-mount',
|
|
'systemd-timers',
|
|
'users',
|
|
'zsh',
|
|
],
|
|
'metadata': {
|
|
'dns': {},
|
|
'hosts': {
|
|
'10.0.10.2': [
|
|
'resolver.name',
|
|
'secondary.resolver.name',
|
|
],
|
|
},
|
|
'letsencrypt': {
|
|
'acme_node': 'htz.mails',
|
|
},
|
|
'nameservers': {
|
|
'10.0.10.2',
|
|
},
|
|
'systemd-timers': {
|
|
'trim': {
|
|
'command': '/sbin/fstrim -v /',
|
|
'when': 'daily',
|
|
},
|
|
},
|
|
'users': {
|
|
'root': {
|
|
'authorized_keys': {
|
|
'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILMVroYmswD4tLk6iH+2tvQiyaMe42yfONDsPDIdFv6I ckn',
|
|
},
|
|
},
|
|
'ckn': {
|
|
'shell': '/usr/bin/zsh',
|
|
'authorized_keys': {
|
|
'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILMVroYmswD4tLk6iH+2tvQiyaMe42yfONDsPDIdFv6I ckn',
|
|
},
|
|
},
|
|
# agent sessions (ssh-grant): the key only works while a grant is active
|
|
'mwiegand-agent': {
|
|
'authorized_keys': {
|
|
'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDeU8FKtjN1+VjhxKZTzyvJ51GzPevrScXgou08hFmjb mwiegand-agent',
|
|
},
|
|
},
|
|
},
|
|
'sudoers': {
|
|
'ckn': {'ALL'},
|
|
'mwiegand-agent': {'ALL'},
|
|
},
|
|
},
|
|
}
|