From bd0b918fe03d69451519dfdf51752986b3b1df83 Mon Sep 17 00:00:00 2001
From: Fulvio Galeazzi <fulvio.galeazzi@garr.it>
Date: Mon, 23 Mar 2020 21:48:18 +0100
Subject: [PATCH] Update README.md
---
README.md | 27 ++++++++++++++++++---------
1 file changed, 18 insertions(+), 9 deletions(-)
diff --git a/README.md b/README.md
index 16c1c22..e078c09 100644
--- a/README.md
+++ b/README.md
@@ -8,7 +8,7 @@ This package sets up:
Pre-requisite
-------------
-Ensure `ansible` is installed on both `openvpn` and `authca`, by executing::
+Ensure `ansible` is installed on both `openvpn` and `authca`, by executing:
```
apt install ansible
```
@@ -23,7 +23,7 @@ configured with a public IP address.
To avoid storing the installation SSH key to `openvpn`, we will use `ssh-agent` to
enable safer login to `authca`.
-From your client machine, execute the following::
+From your client machine, execute the following:
```
eval "$(ssh-agent)"
ssh-add <the_private_key_used_for_installation>
@@ -31,24 +31,30 @@ From your client machine, execute the following::
ssh -A ubuntu@openvpn # you should not be prompted for password/passphrase
```
-Now, on `openvpn`, verify your agent has the required identity loaded::
+Now, on `openvpn`, verify your agent has the required identity loaded:
+ ```
ssh-add -L
+ ```
-You should now be able to log into `authca` with::
+You should now be able to log into `authca` with:
+ ```
ssh ubuntu@authca
+ ```
Bootstrap Ansible configuration
-------------------------------
-This step will::
+This step will:
* create a generic `ansible` user
* for such user, create `~/.ssh/authorized_keys` from keys stored by SSH-Agent on localhost (`ssh-add -L`)
* grant "sudo" privileges
Execute the command (note that we override `ansible_user` with the `-e` switch,
-so it matches the generic user created during server installation)::
+so it matches the generic user created during server installation):
+ ```
ansible-playbook -e "ansible_user=ubuntu" -v -i inventory.yml playbooks/bootstrapconfig.yml
+ ```
Installation and Configuration
------------------------------
@@ -58,8 +64,10 @@ your organization (country, province, city, organization name, email, organizati
Note that you won't be able to change those, afterwards.
-Execute the `setup.yml` playbook::
+Execute the `setup.yml` playbook:
+ ```
ansible-playbook -v -i inventory.yml playbooks/setup.yml
+ ```
which will take care of:
* installing some useful packages (see list in file `roles/setup/vars/Debian.yml`), as well as `openvpn` and `easyRSA`
@@ -81,12 +89,13 @@ to be continued
License
-------
-This work is protected by CC-BY 4.0
-[](https://creativecommons.org/licenses/by/4.0/)
+This work is protected by CC-BY 4.0.
[](https://creativecommons.org/licenses/by/4.0/)
+***
+
Author Information
------------------
--
GitLab