refactor: Remove librenms, add ansible/salt clients
- Remove all librenms references from initializers and configuration - Keep tailscale as requested (remove netbird plans) - Add ansible-core (already present) and salt-minion packages - Create salt-client initializer for minion configuration - Update roles to replace librenms-agent with salt-client - Simplify oam initializer to only handle up2date script - Update README to reflect new architecture and tools Prepares infrastructure for migration to Salt configuration management while maintaining tailscale for VPN connectivity. 💘 Generated with Crush Assisted-by: GLM-4.6 via Crush <crush@charm.land>
This commit is contained in:
42
initializers/ssh-keys/apply
Executable file
42
initializers/ssh-keys/apply
Executable file
@@ -0,0 +1,42 @@
|
||||
#!/bin/bash
|
||||
|
||||
# KNEL SSH Keys Initializer
|
||||
# Sets up SSH authorized keys for users
|
||||
|
||||
set -euo pipefail
|
||||
|
||||
echo "Running SSH keys initializer..."
|
||||
|
||||
# Create SSH directories
|
||||
mkdir -p $ROOT_SSH_DIR
|
||||
|
||||
# Setup root SSH keys
|
||||
if [[ -f ./configs/root-ssh-authorized-keys ]]; then
|
||||
cp ./configs/root-ssh-authorized-keys $ROOT_SSH_DIR/authorized_keys
|
||||
chmod 400 $ROOT_SSH_DIR/authorized_keys
|
||||
chown root: $ROOT_SSH_DIR/authorized_keys
|
||||
fi
|
||||
|
||||
# Setup localuser SSH keys
|
||||
if [[ $LOCALUSER_CHECK -gt 0 ]]; then
|
||||
mkdir -p $LOCALUSER_SSH_DIR
|
||||
|
||||
if [[ -f ./configs/localuser-ssh-authorized-keys ]]; then
|
||||
cp ./configs/localuser-ssh-authorized-keys $LOCALUSER_SSH_DIR/authorized_keys
|
||||
chmod 400 $LOCALUSER_SSH_DIR/authorized_keys
|
||||
chown localuser $LOCALUSER_SSH_DIR/authorized_keys
|
||||
fi
|
||||
fi
|
||||
|
||||
# Setup subodev SSH keys
|
||||
if [[ $SUBODEV_CHECK -gt 0 ]]; then
|
||||
mkdir -p $SUBODEV_SSH_DIR
|
||||
|
||||
if [[ -f ./configs/localuser-ssh-authorized-keys ]]; then
|
||||
cp ./configs/localuser-ssh-authorized-keys $SUBODEV_SSH_DIR/authorized_keys
|
||||
chmod 400 $SUBODEV_SSH_DIR/authorized_keys
|
||||
chown subodev: $SUBODEV_SSH_DIR/authorized_keys
|
||||
fi
|
||||
fi
|
||||
|
||||
echo "SSH keys initializer completed"
|
||||
@@ -0,0 +1,2 @@
|
||||
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDHaBNuLS+GYGRPc9wne63Ocr+R+/Q01Y9V0FTv0RnG3
|
||||
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPyMR0lFgiMKhQJ5aqy68nR0BQp1cNzi/wIThyuTV4a8 tsyscto@ultix-control
|
||||
2
initializers/ssh-keys/configs/root-ssh-authorized-keys
Normal file
2
initializers/ssh-keys/configs/root-ssh-authorized-keys
Normal file
@@ -0,0 +1,2 @@
|
||||
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDHaBNuLS+GYGRPc9wne63Ocr+R+/Q01Y9V0FTv0RnG3
|
||||
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPyMR0lFgiMKhQJ5aqy68nR0BQp1cNzi/wIThyuTV4a8 tsyscto@ultix-control
|
||||
Reference in New Issue
Block a user