[sshd] add @Tjzabel as authorized user to irc-lug.rit.edu #26
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This is an old action item I've had on my plate, but this PR adds @Tjzabel as an authorized user to the
irc-lug.rit.edu
host. This change is tested and also deployed to production already.Needs testing
@Tjzabel: are you able to SSH into the machine now?
Details
Sort of interesting how I did this. Originally, I had a global target user defined for this entire repository, but I am realizing this doesn't scale. I tried out something new and added some variables to the
sshd
role with a list of authorized users and their SSH public keys. Then I loop through the list in the role's tasks, and ta-da! It works.Something I am wondering: does it make more sense to define these users globally or only in this specific role? Probably yes, since @Tjzabel isn't a member of the
teleirc
ormatterbridge
groups, which grant read/write privileges to private files in the deployment directories. I'll try and get that in a future PR.