hostname: ${hostname}
timezone: Europe/Warsaw
users:
- name: ${username}
gecos: Kubernetes Node User
ssh_authorized_keys:
- ${ssh_public_key}
lock_passwd: true
sudo: ['ALL=(ALL) NOPASSWD:ALL']
shell: /bin/bash
groups: [sudo, docker]
package_update: true
packages:
- qemu-guest-agent
- sudo
- fail2ban
- ufw
runcmd:
- yes | ufw reset
- ufw default deny incoming
- ufw default allow outgoing
- ufw allow 22
- yes | ufw enable
- systemctl enable fail2ban --now
- systemctl start caddy
- mkdir /home/${username}/webpage