@@ -49,9 +49,10 @@ Alternatively, if password authentication is preferred, install sshpass.\
49
49
50
50
** * Limit use of sshpass for setup only, due to potential security issues. * **
51
51
52
- Note: Be aware the /role/base/tasks/authentication.yml will update the
53
- /etc/ssh/sshd_config, which will disable SSH password authentication;
54
- consequently, making SSH key authentication a hard requirement.
52
+ Note: Be aware /role/base/tasks/ssh.yml will update the sshd_config indirectly
53
+ by the configuration file placed in /etc/ssh/sshd_config.d/, this will disable
54
+ SSH password authentication; consequently, making SSH key-based authentication
55
+ a hard requirement.
55
56
56
57
4 . Amend inventory file if needed, default target is localhost.
57
58
@@ -117,8 +118,8 @@ Additional information for the following roles:
117
118
* [ yamlfmt] ( https://github.com/google/yamlfmt ) (needed for VIM ALE plugin)
118
119
* keychron.yml - enables keychron keyboard shortcuts
119
120
* autostart.yml - enables autostart of applications
120
- * authentication .yml - configures ssh server and client.
121
- disables password authentication
121
+ * ssh .yml - configures ssh server & client; disables password authentication
122
+ * ufw - disables incoming ports, except port 22 (limit) from 192.168.0.0/16
122
123
123
124
* disable-local-dns
124
125
* disables local dns on the target host
@@ -168,14 +169,14 @@ requirements*
168
169
169
170
* env
170
171
* setups personal preferences for bash shell
172
+ * configures .bashrc to read all shell scripts from /home/{USER}/.bashrc.d/
173
+ to set environment
171
174
* fzf is required for [ fzf.vim] ( https://github.com/junegunn/fzf.vim )
172
175
* .bashrc -bash function ` se ` is for fast directory navigation at the CLI
173
176
refer to [ fzf explorer] ( https://thevaluable.dev/practical-guide-fzf-example/ )
174
177
(this is slightly different from the built in alt-c command provided with fzf)
175
178
* refer to System Updates section for manual (script) updating of fzf
176
179
177
- * ufw
178
- * disables incoming ports, except port 22 (limit inbound connections port 22)
179
180
180
181
* vim
181
182
* installs customization only, does not install vim
@@ -227,10 +228,9 @@ and convenience...
227
228
Upgrade specific packages, not upraded via apt or snap:
228
229
229
230
1 . ` execute scripts/aws_upgrade.sh `
230
- 2 . ` execute scripts/sam_upgrade.sh `
231
- 3 . ` execute scripts/fzf_upgrade.sh `
231
+ 2 . ` execute scripts/fzf_upgrade.sh `
232
232
(alternatively delete the ~ /.fzf folder and re-run ansible)
233
- 4 . If Docker Desktop, is installed. Start Docker Desktop, click "Settings",
233
+ 3 . If Docker Desktop, is installed. Start Docker Desktop, click "Settings",
234
234
then "Software updates", then "Check for updates", then Download and install
235
235
updated Docker Desktop.
236
236
` sudo apt update && sudo apt install ./docker-desktop-<version>-<arch>.deb `
0 commit comments