carrot / salty-carrots

Salt Stack based provisioning for Carrot Creative servers
GNU General Public License v3.0
4 stars 0 forks source link

Salty Carrots

Salt Stack based provisioning for Carrot Creative servers

Add all your public SSH keys to salt/ssh/keys, they will be included automatically. This is configured to deny all password auth, so public-key auth is the only way to access the server.

The default username is carrot, which can be changed in pillar/users.sls. The root user is disabled for security.

The default password is core2062 which can be changed in pillar/password_hash.sls. Since password auth is disabled, this password probably doesn't need to be a secret - the only place you will use it is for sudo (not for logging into the system).

setup script:

sudo apt-get install git
git clone https://github.com/carrot/salty-carrots.git /srv
sudo sh /srv/setup.sh
sudo salt-call --local state.highstate

Then just wait for it to run (it takes awhile).