Dustin C. Hatch
ce0dac983f
1. Set a password for *root* on all machines (useful for logging in via serial console if network is down) 2. Set an authorized SSH key for root on all machines: * For Fedora 34, use my FIDO2 security token key * For all other hosts, use my ED25519 key
14 lines
533 B
YAML
14 lines
533 B
YAML
krb5_realm: PYROCUFFLINK.BLUE
|
|
samba_security: ads
|
|
samba_use_winbind: true
|
|
pam_winbind: true
|
|
nss_winbind: true
|
|
pam_mkhomedir: true
|
|
|
|
root_authorized_keys: >-
|
|
{% if ansible_distribution == "Fedora" and ansible_distribution_version|int >= 34 %}
|
|
sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAINZCN2cxMDwedJ1Ke23Z3CZRcOYjqW8fFqsooRus7RK0AAAABHNzaDo= dustin@rosalina.pyrocufflink.blue
|
|
{% else %}
|
|
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJsL5fSylmiJmBtW0DH/viAAmtU2E/2M17GPvysiyRs+ dustin@rosalina
|
|
{% endif %}
|