docs: reflect live koopa state (inventory + exchange-ansible)
Capture what is actually running on host koopa: podman names/ports, Caddy vhosts, and hernani paths. Authoritative snapshot: host/overview/LIVE.md. Rename docs to live container taler-hacktivism-exchange-ansible (not the short taler-exchange-hacktivism label). Add public-only mirror of ~/ansible-taler-exchange deploy helpers (no secrets.yml).
This commit is contained in:
parent
549ca638e8
commit
b5c1bf7591
11 changed files with 274 additions and 17 deletions
26
configs/taler-exchange-ansible/Containerfile
Normal file
26
configs/taler-exchange-ansible/Containerfile
Normal file
|
|
@ -0,0 +1,26 @@
|
|||
FROM docker.io/library/debian:trixie
|
||||
|
||||
ENV DEBIAN_FRONTEND=noninteractive
|
||||
|
||||
RUN apt-get update -yqq && \
|
||||
apt-get install -yqq \
|
||||
ansible \
|
||||
cron \
|
||||
git \
|
||||
locales \
|
||||
openssh-server \
|
||||
python3 \
|
||||
python3-debian \
|
||||
systemd \
|
||||
whois # mkpasswd provided by whois package
|
||||
|
||||
RUN mkdir -p /etc/ansible/facts.d
|
||||
|
||||
#####################################################################
|
||||
## WARNING: THIS ALLOWS FOR COMPLETELY UNAUTHENTICATED SSH SESSIONS #
|
||||
####### FOR TESTING ENVIRONMENT ONLY! ###############################
|
||||
RUN echo "root:$(mkpasswd -s </dev/null)" | chpasswd -e
|
||||
RUN sed -i'' -e's/^#PermitRootLogin prohibit-password$/PermitRootLogin yes/' /etc/ssh/sshd_config \
|
||||
&& sed -i'' -e's/^#PasswordAuthentication yes$/PasswordAuthentication yes/' /etc/ssh/sshd_config \
|
||||
&& sed -i'' -e's/^#PermitEmptyPasswords no$/PermitEmptyPasswords yes/' /etc/ssh/sshd_config \
|
||||
&& sed -i'' -e's/^UsePAM yes/UsePAM no/' /etc/ssh/sshd_config
|
||||
Loading…
Add table
Add a link
Reference in a new issue