mfocko/dotfiles
1
0
Fork 0
Code Issues 6 Pull requests Projects Releases Wiki Activity

fix(system/sshd): use HashiCorp Vault address from variable

Browse source 
Signed-off-by: Matej Focko <me@mfocko.xyz>
This commit is contained in:
Matej Focko 2024-07-12 14:53:42 +02:00
parent c116552ab8
commit 741f570235
Signed by: mfocko
SSH key fingerprint: SHA256:icm0fIOSJUpy5+1x23sfr+hLtF9UhY8VpMC7H4WFJP8
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
roles/system/sshd/tasks/trusted_ca.yml
View file

@ -1,7 +1,7 @@
--- ---
- name: Fetch the public key from the HashiCorp Vault - name: Fetch the public key from the HashiCorp Vault
ansible.builtin.get_url: ansible.builtin.get_url:
url: https://hvault.mfocko.xyz/v1/ssh/public_key url: https://{{ hashicorp_vault_address }}/v1/ssh/public_key
dest: /etc/ssh/sshd_config.d/trusted-user-ca-keys.pem dest: /etc/ssh/sshd_config.d/trusted-user-ca-keys.pem
mode: 0600 mode: 0600
owner: root owner: root