## template: jinja
#cloud-config

# packages
package_update: true
package_upgrade: false
packages:
  - buildbot-worker

# apt
apt:
  sources:
    deadsnakes:
      source: 'ppa:deadsnakes/ppa'
    gitea-sysdeploy:
      source: "deb https://git.bitmessage.org/api/packages/Sysdeploy/debian $RELEASE main"
      key: |
        -----BEGIN PGP PUBLIC KEY BLOCK-----
        
        xsBNBGXzDwsBCADlme05a3MVC35GADsMb/Fg+WquRABvmMM9I8IKUTYXRDtXBXnJ
        yHaIyB923FY8ffYJOf6CYiv6ehfpOpg9bxxF4uB55+p/RRofseXzw2v4+2VzqyPn
        oyr1keh5SUQKyAKVhqZbhY88bLVs8bOL9BzMly5d53ZNLslV5Rrv+u3xDIAco603
        fIBNYtYUdL31xY90jBVc9D1jI6nhtFL9Ty3nmN7ggIeVd0H8mgOcBS1NkTi2OmkX
        hfYAqy7GLsCAfs6c5TtceKarJC+vxb3kFcIYGeuSFUSx49qUYSbiLneok+numOuc
        7P+JKqgI5ZvJz6qmp/nv0WfpTx9hV+liGxgrABEBAAHNEShEZWJpYW4gUmVnaXN0
        cnkpwsBiBBMBCAAWBQJl8w8LCRDcSvdjOvtYXgIbAwIZAQAAk+cIAGS9GIwJ42Ne
        jMKFZrZkAIhPpDiSF7SHr4jrcjorpHt81J+R/ild19vUoyeBJugDruqrGeWggmDC
        AaCMFEBwXKeO7k5UJI556vaaaQ3tDsOJ2m1E887K+KuPwsq20dBcjOZsEoXxSCsQ
        f50wP1t2TB4s3BQZg9p7FJQ4kOC+byqVZCcJ24GhqUsAuklAK6qBj1XW3aIA9lGd
        p7PsivdjUVni/5Pc6d/aQ/+KWwNBSYZ0R2fSEArY2wFCIPzBE6gpUQleIHmcRQGx
        rKZzwm9evubbCgc+K3Kl5YFoC14kj0fKGS86tK9wtc4wM3TBCYRiy6JXoQLeHbME
        FaDDoL3GVuDOwE0EZfMPCwEIANZW9UyTEwJbuSna+sS7OMBs5B3BmrlWegGAfEZL
        pFxjs7NFuwABlM1WPAWRh9FmDMmS9kyS5GmpX6tcCjhEGFnGPv889MtW7KPwpvAj
        YhT3FAsxhwYP0YREzfRUyNjX29OcYrUAB9NKMXcgQ4WhQWZeqVkmDOzirU6Qnk7h
        zXvtS7hoyPOyqji0sTYVl0nFfnaO2gyLE+2uDlXIdTJDHfkNuM/9UmjeTLrInmWm
        LWpzPMqL2YkUkSRyJroLp09TJGnnr07yJ1bdhWDJdXR3RhOaO+bZMZgBG61EYjOQ
        76Q2CfNwl/LsB73Yp+w+ilGJ0pSwvnPTZHTpkl5rfuT9VfEAEQEAAcLAXwQYAQgA
        EwUCZfMPCwkQ3Er3Yzr7WF4CGwwAAGFQCAAtzY/ZLXdhljSIDwfZ7M0coKSLhvCe
        OAY9L+HyqNR2BbjqS/KaKd5imL3d5SRm8qOxD2bIk16wQ9+q/hyUR9P32HeWN2UB
        BaqpZ1D+XZcXnq0NuPI0ht+HXpdAAveNEQbreKTCXN1G8g2Zq750OhqfiMX+fWT4
        edlHINs7T0921vKfD9sZSKtYk+WM0h3v9ej5sBhJtVLT2rZjjt7Z66680o4opcqL
        n7U0bf9C7cexGR0DX5j3zo7Hwc7tlDG1XLIIto9PwDECEzeWv8ErDhaKFMf6HHiG
        WgAcXZzg7XG56Jz1t0zbGKVVMuK0ZyT0xMMx0LgQggeh0XQ7CTNoOHRn
        =pB1o
        -----END PGP PUBLIC KEY BLOCK-----

# root
disable_root: false
ssh_deletekeys: true
ssh_pwauth: false
ssh_authorized_keys:
  - "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVrfim4EMF7FzAnQF51frpsPgN\
   JxfkzvBEC80wgwwP0AzD2iFPS57a6sXbie+sX7ALX89gmRwFtrKOwGYRYoQfU6dA\
   hPirbpKY4BcTQx8N31fazceVJL0Y1kqSngNjYMbo1q0L5dgLBtPoVGcnriFAVGLg\
   1+p9FIJTDK4rbwnYyDJyjruSAfnqVaWmqlMNAZNhqxOikBOh5M+3qPj0wmSKOE1r\
   oE4HmQKUl62UjDWTkLLNx5u75QywQz+r8S0QNkSu/0iaeUdgkv3p0SsU4X5dmwuZ\
   dbySMWkqy0zUCky2+qDqxzN6wHgnePZcedSobsIpxwDK0IrHpbaaBzVNn1uh shu\
   rdeek@nitrokey1"
  - "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1ADz4g7BkLoq9CEffl7jxp4Ms\
   Brtv12rYpskUMV2HKH48Uwue/yjqvwxaRk4Nd0TG2fQisqsB3GYLRe+6R00zbn2k\
   A5k49gQEt6EnVVlsTWSp6iutCi8CEOSxFew/r//NOJbKQPWN2yCh8TQowks+lM/z\
   wlFhzfoqDjgMCU13IW/O9RphnMACnx1o/EvUeoozcCMbAzJOq4I/YOSJwavuTUUC\
   lnD4tyPs1HyYVcw+4Bti1QERkE+tbbgXUAy7WvxXpEflfenHHIAnjqUCW3LUJ6wT\
   roq55FQ1RT7WE+XddL5OI+o4vbQVG8cbYXwCk6/m+P051v9PfnyecI6qj8wd shu\
   rdeek@yubikey1"
  - "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7Pebz7cNpL/Hikzfwzdnujcd1\
   BWw4D4e1OXQaoCGcq2/gL+Wym8InL5qZ5hOgaF8lRVX5ys7m75uOyg8LOIRu0A27\
   TzWzf9brV8TF5rsIhHYSK0CAA81G5NqOQgP3b7SANcs3PEWtxz+OeqFo7dcsQZij\
   czRNunM73CBsTFZQCmNE2ZBh2QaQ1d/1lmYTqGlJ8DJrqeXXVc3S1Jln2nZ49XQM\
   qdG49KvU66Xhd8kaukucDBl8iNLWpQ+N9Ao1SOnNlJVpLi6XUy9Hx3X3wVbrLQaH\
   slIG6+AeZGpO/l3gKrQM3fjM2H+w9ow1rWcMdHgjxWZUryE7K1vzbpm4vNIf shu\
   rdeek@brusli"
  - "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4LMmfil++N1tuQE+vz+n4KlKF\
   +C8LJ08Tui5evBINMinIWsNYNXHo4zQ3jioUaiPUbMfApaexdL/6d9c69maIJr+I\
   o3JJfgbYFWiFVyWIdtr4Lapv3kyGIusVp5hm5fK1ZM7dOdWStWqdZSHJIuQdv3Zg\
   CJkZHFSiFnL7lxTvtIelVjBvsyROq+kH6YOdcagUY/RRzPaL58Ul0r3JcEVhhnKr\
   dR21shc/6GI3irsn4Up3Bf4jRnrwiRuBJQZXMLSsn5BTMPY5HLptIlndizb5Smub\
   rwErhe5OaVU8S+ZzzkWu9SfZFxHmkuhVfSnEs5GOUABrZWlleLn/OvbZcK2V shu\
   rdeek@whisper.ssh"
  - "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCrIjXkTOxLxaCA0o1SmC2bV09H\
   b3/seHYdd8kAKlTItbfnu0y/8RB+zRYt111ZmlfvbczsX5qNwaJoEwAxrkjtA5D/\
   BnvSMSrxvmkRKtUMnXLOldr3hrZjRuTAmP3YxwcGfrNWv/+UcNSf1QE6NRJDxOSr\
   BQ7qYAMaiq+6acztY7nvVWJ9ZntFOOaWOhkVWoCeDWmBEjRlQ1hCIMxm8BhopFau\
   mkEVnnku/OskS2ZD6SFe6aKSXmaHV4nwtiQ5GiwdIEnrQ1GzK3h7SfRu/BXRhcnn\
   PGIeRBuKaq/P1bqLsnFChPsrvkEP1Z/daosaGanIzODxkFO0rAkdScI4kHUhZba0\
   vb3ahV4JpAwaH8dEQm0nkuxbUe2YR3eii6bMh9zv7BiXJnyTQtRzdYn4Im2eeSTO\
   IlckohJWunhdnU9cRy8lFH7zILmr6sqxmjXxFzXS1KUas/+0yD4lgDDlsQtF6qI6\
   pA75/tmK8pIq8915ShZA14bwDXWYLBDx+sy24iyG+kpSumzDqyNXvm+Z+bHHYAjI\
   1uUcTKltnPQ4nJrhmY2+M4IhmL1LVyQU7K63BYlTtuV1106Xa8tQnzTblJKXPMqy\
   /3LlV4TbSyUNJR0a5ma7LR/vxeloL1gxRQCQYJxcM1MD6VroqKUPIzhOWCdEPcM2\
   +9oySOZbqDKfrenTMQ== yubikey@lenovopadpro"
  - "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdH\
   AyNTYAAABBBCJfhSCRSrz1rSFtSWNt6EzL08l1DOjcEKBREUwtKZgxDJcj2MdXH6\
   Z7otnJUUmOqf43x35eayCpQz8EG8eKJio= johndoe@macbook.pro@secretive\
   .MacBook-Pro.local"

users:
  - name: buildbot
    shell: /bin/bash
    sudo: ALL=(ALL) NOPASSWD:ALL

# system settings
timezone: Europe/Vienna
hostname: {{hostname}}
fqdn: {{hostname}}.{{guest}}.homedevops

# CERT
ca_certs:
  trusted:
    # buildbot.bitmessage.org PB
    - |
      -----BEGIN CERTIFICATE-----
      MIIFczCCA1ugAwIBAgIUDGtpHV1pcNVBXVt69fRXvCwBdc0wDQYJKoZIhvcNAQEL
      BQAwSTELMAkGA1UEBhMCQVQxDzANBgNVBAgMBlZpZW5uYTEPMA0GA1UEBwwGVmll
      bm5hMRgwFgYDVQQKDA9CaXRtZXNzYWdlIEdtYkgwHhcNMjQwMzAzMTgyNzI5WhcN
      MjYxMTI4MTgyNzI5WjBJMQswCQYDVQQGEwJBVDEPMA0GA1UECAwGVmllbm5hMQ8w
      DQYDVQQHDAZWaWVubmExGDAWBgNVBAoMD0JpdG1lc3NhZ2UgR21iSDCCAiIwDQYJ
      KoZIhvcNAQEBBQADggIPADCCAgoCggIBAN297lK71o4mpXBzmVnjW76m/r4lp+1H
      F6T5IPbNZ3DpvibJRk2TXjEblpen2hdcJffvlRVCG3yQ8tgWLTVe6y7C/dDx7UEZ
      BsvUvKoJqdTbsg9OF888Qq1ghsHmgjgCJ4bNDg/FLZryj0JxWcmvfR0cnoDZscFS
      GuqDlcA/5Zc456Wkf5yjjYlVEz/qclfand2xkYCJM+OuCLnzsgWyW3NyAapC7PYG
      mfmNE/vKboHOMVkScSxyf4RfNQlt/ZurNqQW8SgVE2ppicF6N+HDxDIsXIRo3zaW
      DjF3qC3QctJwbc70xxtTiSTYj0L4j5hSypkJ7oO+U6mk+wdt4abTMS/on8MGVDZi
      WwtnW7PYrvmuhrAaWEsETCySdVLWvTAEjhEqSoHWd0bIh0Qnhtso/VVjKsm/8zZI
      NKNjV+BIyr2L9ZuE34nnbkEV6Dfj58IW4nwykFEljdt1im6hgpyVsTg+WJ1gMCxH
      VBFqfFBI/BKLnqiBjQAwUBQOzWE+emV7GeXC1e4rO/7Ptj6nVAyG7MHbqjYZOKRv
      DsAWx6eeRWNdfZrGTcmB6x1zVDI6gxp/GLRU2sfqs1g7p40I1qUS2YPng9BAw5TL
      1WjJJwpMB5XiWy3qcg20FbiH2Q0olitOTEnHPL3Ecco0vQMgr5VQgDdM/O0TuWYB
      LvFdU/H8CfOBAgMBAAGjUzBRMB0GA1UdDgQWBBRkgqkhWz8EvvFsOaxbg/MjoWuq
      cTAfBgNVHSMEGDAWgBRkgqkhWz8EvvFsOaxbg/MjoWuqcTAPBgNVHRMBAf8EBTAD
      AQH/MA0GCSqGSIb3DQEBCwUAA4ICAQCFLT/RMzFl4SRmGyfTbRBXDUORSqq1mmdz
      LNl1+UqdfMYupLgsJXZWf3wEt+RRjZzXBVX1ZwjgBiQS1MTMrcJ+5x4JCOtknK17
      3N0KKK58McAIn6BL44uAHAAmJsfptB1AnFf6adlRuVLeBs3Dgj2aU5nJ79ZKkClN
      xJX8roGkkfn21lJ/lpEQwdz3klSIvE2Jr0HOsFBbeXre8q/zUQCRuEtRSjW45Ycx
      Yv3aI1Mo0Ak5P7XDDmux6tD6+nn9lAzOGucTfmZbsH85WGV5eSRezb4xqYUfZq1+
      1uF+aLRNdiV9+M0/PJJ82GjxWfL+n+hh3LTxecym3Gj1IEgfW8AMN/VJPRPWYOrg
      zIwG7F6NDh3szaSbCgZ0htezHTWH0NW/+PO90dMdTwdJi2/WVAaqqCk6sTfGfKdx
      sb6MAdLxmoYOZVj0eSaoAq0dJEOo/5yWwzJEHZYjXkc/xJVs6O60x2GLk5dXz6U9
      dQIfVIPBeNYwA1ICbo5TJ3xjYUe3nQAT2TXlD2tFCj2VgGFfQRBRrkci/m+oJr6v
      DbBw7WaVw843qm5/dfNH7Nx8FhFpCJ6T/ILqaoU1v5DBS71I6rkQCuBp4Aqp+Waw
      2NqJB0/fVkvcoP66JMLImdbtRq8N9JMcofWDjq29HTpPQAnXl72J53H6NTFtFTpZ
      MXyumh2iRw==
      -----END CERTIFICATE-----


# post boot
runcmd:
  - [ sudo, -u, buildbot, --, buildbot-worker, create-worker, 
    '--use-tls', /var/lib/buildbot/workers/default,
    'buildbot.bitmessage.org',
    {{buildbot_username}}, {{buildbot_password}} ]
  - [ systemctl, enable, buildbot-worker@default.service ]
  - [ systemctl, start, buildbot-worker@default.service ]