totpcgi / 2fa: remove old totpci and files and roles.

Note: there are still some calls here in old fas in openshift, but we
will remove those when we remove old fas (likely as soon as zodbot is
ported over to noggin).

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2021-05-17 13:00:56 -07:00
parent 6ac5a89b14
commit f23fd1b7a1
28 changed files with 0 additions and 1524 deletions

View file

@ -1,40 +0,0 @@
---
- name: install pam_url
package: name=pam_url state=present
tags:
- packages
- 2fa
- name: /etc/pki/tls/private/totpcgi.pem
copy: src="{{ private }}/files/2fa-certs/keys/{{ inventory_hostname }}.pem" dest=/etc/pki/tls/private/totpcgi.pem mode=0400
tags:
- config
- 2fa
- name: /etc/pki/tls/private/totpcgi-ca.cert
copy: src="{{ private }}/files/2fa-certs/keys/ca.crt" dest=/etc/pki/tls/private/totpcgi-ca.cert mode=0400
tags:
- config
- 2fa
- name: /etc/pam_url.conf - split for staging/phx2/everyone else
template: src={{ item }} dest=/etc/pam_url.conf mode=0644
with_first_found:
- "{{ files }}/2fa/pam_url.conf.{{ inventory_hostname }}"
- "{{ files }}/2fa/pam_url.conf.{{ ansible_domain }}"
- "{{ files }}/2fa/pam_url.conf.{{ datacenter }}"
- "{{ files }}/2fa/pam_url.conf.j2"
tags:
- config
- pam_url
- 2fa
- name: /etc/pam.d/sudo
copy: src={{ item }} dest=/etc/pam.d/sudo mode=0644
with_first_found:
- "{{ files }}/2fa/sudo.pam.{{ inventory_hostname }}"
- "{{ files }}/2fa/sudo.pam.{{ ansible_domain }}"
- "{{ files }}/2fa/sudo.pam"
tags:
- config
- 2fa