Encryption and major changes

ansible/host_vars/contabo01.a13labs.pt.yaml

@@ -11,7 +11,7 @@ sshd_permit_root_login: "no"
 sshd_password_authentication: "no"
 sshd_allow_tcp_forwarding: "yes"
 ansible_user: "{{ lookup('env', 'ANSIBLE_USER') }}"
-ssh_users:
+login_users:
   - username: operator
     comment: "Managed by Ansible"
     sudoer: true
@@ -57,9 +57,11 @@ custom_hosts_acls: true
 
 # GeoIP subscription
 geoip_sshd_enabled: true
-ssh_allowed_zones:
+geoip_ssh_allowed_zones:
   - "BE"
   - "PT"
+geoip_ssh_allowed_networks:
+  - "0.0.0.0/0"
 
 # fail2ban
 fail2ban_jails:
@@ -77,20 +79,22 @@ unattended_reboot: true
 unattended_reboot_time: "04:30"
 
 # Kubernetes specific settings
-microk8s_alt_names: "{{ hostname }}"
-k8s_version: 1.29
-k8s_allowed_hosts:
+microk8s_version: 1.29
+microk8s_allowed_hosts:
   - 87.67.163.177
+microk8s_alt_names: "{{ hostname }}"
 
-k8s_users:
+# Let's encrypt issuer
+microk8s_issuer_email: c.alexandre.pires@alexpires.me
+microk8s_encryption_cfg: /a13labs/microk8s_encryption.yaml
+microk8s_encryption_secret: "{{ lookup('env', 'MICROK8S_ENCRYPTION_SECRET') }}"
+microk8s_users:
   - username: operator
     enabled: true
   - username: git
     namespace: "gitea"
     enabled: true
 
-# Let's encrypt issuer
-issuer_email: c.alexandre.pires@alexpires.me
-
+# Duo Security
 duo_users: ["*", "!provision", "!git"]
 duo_api_hostname: api-7cda1654.duosecurity.com