heath authorized_keys: - heath@hpetersenfamily.com password: status: VALID value: COMMON STRONG FOR ALL HOSTS private_keys: - FOR WORKSTATIONS: heath@hpetersenfamily.com # Can this even be done securely through Ansible? first authorized_keys: - first@hpetersenfamily.com - heath@hpetersenfamily.com password: status: VALID value: UNIQUE LONG FOR EACH HOST private_keys: root authorized_keys: - heath@hpetersenfamily.com password: status: LOCKED private_keys: hpf-ans: authorized_keys: - heath@hpetersenfamily.com password: status: LOCKED private_keys: ******** CHANGE PASSWORDS ******** x Bitwarden MASTER * Google - heathpetersen@hpetersenfamily.com * Google - heathpetersen@kandre.com # Change to work with multiple distros (nothing hardcoded) * create production, development branches * cron job for ansible-pull * Configure hosts # cat >>/etc/hosts <<-!!TheEnd!! ::1 name.f.q.d.n name-ipv6.f.q.d.n name name-ipv6 127.0.0.1 name.f.q.d.n name-ipv4.f.q.d.n name name-ipv4 !!TheEnd!! ########## ########## normal tasks ########## - name: Install openssh, openssh-server, openssh-sftp-server ansible.builtin.apt: pkg: - openssh - openssh-server - openssh-sftp-server - name: Install bash, bash-completion ansible.builtin.apt: pkg: - bash - bash-completion - name: Install chrony ansible.builtin.apt: pkg: - chrony #- name: Set host name # ansible.builtin.hostname: # name: ## Fully qualified domain name ## # use: systemd * Configure chrony # cat >/etc/chrony/sources.d/hpetersenfamily-north-america.sources <