diff --git a/.github/workflows/ansible-apply.yaml b/.github/workflows/ansible-apply.yaml index 2f18840..0d92184 100644 --- a/.github/workflows/ansible-apply.yaml +++ b/.github/workflows/ansible-apply.yaml @@ -51,13 +51,23 @@ jobs: echo " HostKeyAlgorithms +sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com" chmod 600 ~/.ssh/config + - name: Start SSH Agent + env: + VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }} + run: | + ssh-agent -a $SSH_AUTH_SOCK > /dev/null + SSH_PASSWORD="$(sectool vault get SSH_PASSWORD)" + echo 'echo $SSH_PASSWORD' > ~/.ssh_askpass && chmod +x ~/.ssh_askpass + DISPLAY=None SSH_ASKPASS=~/.ssh_askpass ssh-add ~/.ssh/id_ecdsa < /dev/null + rm ~/.ssh_askpass + - name: Check SSH Connection env: TRUSTED_HOSTS: ${{ secrets.TRUSTED_HOSTS }} ANSIBLE_USER: ${{ secrets.ANSIBLE_USER }} run: | for HOST in $TRUSTED_HOSTS; do - ssh -vvvv -i ~/.ssh/id_ecdsa $ANSIBLE_USER@$HOST echo "SSH connection to $HOST successful" + ssh -vvvv $ANSIBLE_USER@$HOST echo "SSH connection to $HOST successful" done - name: Apply Ansible Playbook @@ -66,7 +76,7 @@ jobs: ANSIBLE_USER: ${{ secrets.ANSIBLE_USER }} run: | cd ansible - sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_microk8s.yml --private-key ~/.ssh/id_ecdsa - sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_gitea.yml --private-key ~/.ssh/id_ecdsa - sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_nextcloud.yml --private-key ~/.ssh/id_ecdsa - sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_wordpress.yml --private-key ~/.ssh/id_ecdsa + sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_microk8s.yml + # sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_gitea.yml + # sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_nextcloud.yml + # sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_wordpress.yml diff --git a/ssh-keys/ansible/id_ecdsa.key b/ssh-keys/ansible/id_ecdsa.key index de07b68..ef5647c 100644 --- a/ssh-keys/ansible/id_ecdsa.key +++ b/ssh-keys/ansible/id_ecdsa.key @@ -1 +1 @@ -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 \ No newline at end of file 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 \ No newline at end of file diff --git a/ssh-keys/ansible/id_ecdsa.pub b/ssh-keys/ansible/id_ecdsa.pub index d113bdd..ceb1cfd 100644 --- a/ssh-keys/ansible/id_ecdsa.pub +++ b/ssh-keys/ansible/id_ecdsa.pub @@ -1 +1 @@ -ecdsa-sha2-nistp521 AAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlzdHA1MjEAAACFBAFBAP7dYOsOGKH1UeyEzWtOv+e46AuJgcN4QiMQdOB9tft2JzR2epd1/e9VDsqN8cGcbIYi6TvsgA+IVtK4bj6wDACt/FHol1L3vV2xK3/dtbu5SEPkkksL8mqB4LXdsepHuapqhVgEanSSysbpRYytcfsy2Rtwi/Wa+8c8+302lTfG3w== +ecdsa-sha2-nistp521 AAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlzdHA1MjEAAACFBAEFj7rNbTqpVSlp1eZgXcZvKrzORkIudgpP6Q6bsDzq/WYEki20p6i8o/QdQVgae6KJP2cfAkxVBUU3Qxlm1Z/ETQGpLEWicy1QE57VIu2d4CWGFsvgVbevJ4vmITnnh0UBQgeAmEL2r8sIl7EwILuevk3GLVtf1E04AFJ08t56mIVMEg==