From a90d07875d30dd6d32824985102ce756fe827e98 Mon Sep 17 00:00:00 2001 From: Bart Van Geyt Date: Sun, 9 Aug 2026 03:54:01 +0200 Subject: [PATCH] chore(ansible): set admin ed25519 key for platform hosts Provide the admin's ed25519 public key in admin_authorized_keys so the ssh_hardening role installs it, enabling key-based login (and allowing ssh_disable_password_auth to be flipped on later). Co-Authored-By: Claude Opus 4.8 --- platform-infra/ansible/group_vars/all.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/platform-infra/ansible/group_vars/all.yml b/platform-infra/ansible/group_vars/all.yml index 1e0e065..86e4e10 100644 --- a/platform-infra/ansible/group_vars/all.yml +++ b/platform-infra/ansible/group_vars/all.yml @@ -66,7 +66,8 @@ smtp_relay_host: "" # optional: allow SMTP only to this hos # ⚠️ If ssh_disable_password_auth is true you MUST provide admin_authorized_keys # for admin_user, or you will lock yourself out. The playbook asserts this. admin_user: "{{ ansible_user }}" -admin_authorized_keys: [] # list of public key strings +admin_authorized_keys: # list of public key strings + - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFHUeM0s5kNSRLQOjBjAVONtRJAnSwcFvvXWLwAXAec4 bart@kaluna2023" ssh_disable_password_auth: false # flip to true once key login is verified # --- Backups / DR (Phase 5) -------------------------------------------------