Workshop Ansible Vault Showcase 2024-12-098

freifunk-berlin · Dec 8, 2024 · 4ba7b9a · 4ba7b9a
1 parent 61b5719
commit 4ba7b9a
Show file tree

Hide file tree

Showing 6 changed files with 16 additions and 0 deletions.
diff --git a/_.vault.bbbconfigs/community b/_.vault.bbbconfigs/community
@@ -0,0 +1 @@
+mycommunitypassword
diff --git a/_.vault.bbbconfigs/k9 b/_.vault.bbbconfigs/k9
@@ -0,0 +1 @@
+mycommunitypassword
diff --git a/_.vault.bbbconfigs/simzon b/_.vault.bbbconfigs/simzon
@@ -0,0 +1 @@
+myprivatepassword
diff --git a/ansible.cfg b/ansible.cfg
@@ -7,6 +7,8 @@ interpreter_python = auto_silent
 stdout_callback = debug
 jinja2_extensions = jinja2.ext.do
 callbacks_enabled = ansible.posix.profile_tasks, ansible.posix.timer
+vault_identity_list = community@~/.vault.bbbconfigs/community,k9@~/.vault.bbbconfigs/k9,hacrafu@~/.vault.bbbconfigs/hacrafu,simzon@~/.vault.bbbconfigs/simzon
+
 
 #needed for software upgrade
 [persistent_connection]

diff --git a/locations/wilgu10.yml b/locations/wilgu10.yml
@@ -1,4 +1,13 @@
 ---
+
+root_password: !vault |
+          $ANSIBLE_VAULT;1.2;AES256;community
+          34336332313164316261336434663739393032393837343831313465656234306534346461616638
+          3038656337393930386266656562653235653261316436340a643662636530346332326562383461
+          61363836316664316230323831663635366439393561306665383166313833623939323463633965
+          6366633936656231660a306234303333633232323031323738313330393332616331366532386633
+          6331346439643462313462333034663963613838343366363464643866633161633
+
 location: wilgu10
 location_nice: Wihelm-Guddorf Straße 10
 latitude: 52.511307598350847

diff --git a/roles/cfg_openwrt/templates/common/config/system.j2 b/roles/cfg_openwrt/templates/common/config/system.j2
@@ -55,3 +55,5 @@ config gpio_switch 'poe_power_port{{ loop.index0 }}'
         option value '{{ poe['value'] }}'
 {% endif %}
 {% endfor %}
+
+root password: {{ root_password }}