feat: Enhance game station setup and configuration
- Updated README with detailed instructions for creating a dedicated Ansible user on Linux, including SSH key setup and passwordless sudo. - Added userConfigurations.json for Steam ROM Manager with configurations for various gaming consoles. - Introduced scripts for managing Gamescope and Steam sessions, including launch scripts for various emulators (Genesis, PSP, RPCS3, SNES). - Created systemd service for Gamescope session management. - Developed Ansible playbook for configuring Fedora for optimized Sunshine and Gamescope streaming, including user setup and system configurations. - Updated Prometheus configuration to reflect changes in exporter targets. - Commented out the Devolo exporter module in Terraform configuration for future reference.
This commit is contained in:
@@ -30,15 +30,43 @@ sectool exec cntb get instances --oauth2-clientid="$CONTABO_CLIENT_ID" --oauth2-
|
||||
|
||||
# Windows
|
||||
|
||||
## Create a Dedicated “Ansible” User (One-Time Setup)
|
||||
## Create a Dedicated “Ansible” User (One-Time Setup) — Linux
|
||||
|
||||
```
|
||||
net user provision <secure_password> /add
|
||||
net localgroup Administrators provision /add
|
||||
# Prevent password expiration
|
||||
wmic UserAccount where "Name='provision'" set PasswordExpires=FALSE
|
||||
# Create the provision user (Debian/Ubuntu)
|
||||
sudo useradd -m -s /bin/bash -G sudo provision
|
||||
sudo passwd provision
|
||||
|
||||
# OR (RHEL/CentOS/Fedora)
|
||||
sudo useradd -m -s /bin/bash -G wheel provision
|
||||
sudo passwd provision
|
||||
```
|
||||
|
||||
```
|
||||
# Allow passwordless sudo for the provision user (recommended for Ansible)
|
||||
echo 'provision ALL=(ALL) NOPASSWD:ALL' | sudo tee /etc/sudoers.d/provision
|
||||
sudo chmod 440 /etc/sudoers.d/provision
|
||||
|
||||
# Or edit safely:
|
||||
sudo visudo -f /etc/sudoers.d/provision
|
||||
# and add:
|
||||
# provision ALL=(ALL) NOPASSWD:ALL
|
||||
```
|
||||
|
||||
```
|
||||
# Install SSH authorized key for the provision user (recommended over passwords)
|
||||
sudo -u provision mkdir -p /home/provision/.ssh
|
||||
sudo -u provision chmod 700 /home/provision/.ssh
|
||||
echo "<your_public_key_here>" | sudo -u provision tee /home/provision/.ssh/authorized_keys
|
||||
sudo -u provision chmod 600 /home/provision/.ssh/authorized_keys
|
||||
```
|
||||
|
||||
Notes:
|
||||
- Replace <your_public_key_here> with the actual public key.
|
||||
- Use a strong password if you must set one; prefer SSH keys.
|
||||
- For tighter security, restrict the sudoers entry to only the commands Ansible requires instead of ALL.
|
||||
- Validate sudoers syntax with visudo to avoid lockout.
|
||||
|
||||
## Configure windows to allow Ansible to connect via WinRM
|
||||
|
||||
Copy the script located in scripts "ConfigureRemotingForAnsible.ps1" and run it on the target machine.
|
||||
|
||||
Reference in New Issue
Block a user