set remote user and port in all. override in firstrun

2026-09-01 21:55:14 +00:00
parent 2de893ff03
commit 0a76bd67e9
4 changed files with 11 additions and 6 deletions
--- a/group_vars/all/main.yml
+++ b/group_vars/all/main.yml
@@ -2,11 +2,9 @@
 # Vars for every VPS in the fleet. Keep this file plaintext and readable
 # in diffs - actual secret values live in group_vars/all/vault.yml.

+ansible_user: "ansible"
+ansible_port: 25456

-# Hardening toggles (see roles/security)
-ssh_permit_root_login: "no"
-ssh_password_authentication: "no"
-ssh_port: 25456

 ufw_allowed_tcp_ports:
  - "{{ ssh_port }}"