Initial commit. This repo contains ansible CM that describes ECG infrastructure.

A test server (acacia root server) is already included in the inventory, with an ecg admin account.

inventory/group_vars/all/bootstrap.yml

@@ -0,0 +1,9 @@
+---
+netbase__domain: 'ecogood.org'
+bootstrap__admin_system: no
+bootstrap__admin_default_users: []
+bootstrap__admin_sshkeys: []
+bootstrap__admin_users:
+  - name: ecg
+    sshkeys: ["{{ lookup('file', '~/.ssh/id_ed25519-ecg.pub') }}"]
+

inventory/group_vars/all/common.yml

@@ -0,0 +1,6 @@
+---
+netbase__domain: 'ecogood.org'
+ntp__timezone: 'Etc/UTC'
+bootstrap__admin_sshkeys: '{{ lookup("pipe","ssh-add -L | grep ^ssh || cat ~/.ssh/id_ed25519-ecg.pub || true") }}'
+python__v3: 'True'
+python__v2: 'False'

inventory/group_vars/all/system_users.yml

@@ -0,0 +1,17 @@
+---
+system_users__accounts:
+  - name: 'ecg'
+    admin: True
+    shell: '/bin/zsh'
+    groups: ['users','ssh','sshusers']
+    sshkeys:
+      - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEO5nhjvVvdZawbxBjFnpZ1b0tKP3/6mLihRpbslnzO3 jose.canelas'
+      - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMmUWXrblLoCkhxTbaZhCPXRxAxVPnTfKXOKleVdYWTG christian.suessenguth'
+      - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEokDHNJYhqw5LtIhIEPS7q3spM2DZuaLgCPzLLOW9oQ thomas.dedek.portable'
+      - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICN1LccpNTtO7c3uDr9WeCNl13IKTNdq5ObFEFYSKBGF thomas.dedek.home'
+  - name: 'z'
+    admin: True
+    shell: '/bin/zsh'
+    groups: ['users','ssh','sshusers']
+    sshkeys:
+      - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEO5nhjvVvdZawbxBjFnpZ1b0tKP3/6mLihRpbslnzO3 jose.canelas'