From deefc70056f63143d9301438344d27f193647ca6 Mon Sep 17 00:00:00 2001
From: Maksym Buz <buz.maxim@gmail.com>
Date: Sun, 4 Jan 2026 12:49:48 +0100
Subject: [PATCH] feat: Enhance LXC creation playbook with SSH key injection
 and new parameters, introduce Ansible configuration, and adjust script paths
 and secret variable names.

---
 ansible.cfg              |  3 +++
 apt_upgrade.sh           |  2 +-
 example_secrets.yml      |  2 +-
 playbooks/README.md      | 11 ++++++-----
 playbooks/create_lxc.yml |  2 +-
 5 files changed, 12 insertions(+), 8 deletions(-)
 create mode 100644 ansible.cfg

diff --git a/ansible.cfg b/ansible.cfg
new file mode 100644
index 0000000..8130425
--- /dev/null
+++ b/ansible.cfg
@@ -0,0 +1,3 @@
+[defaults]
+host_key_checking = False
+inventory = inventory/hosts.ini
diff --git a/apt_upgrade.sh b/apt_upgrade.sh
index 00e88a1..55b56dc 100755
--- a/apt_upgrade.sh
+++ b/apt_upgrade.sh
@@ -1 +1 @@
-cd /home/mbuz/git/homelab/Ansible/ && ansible-playbook -i inventory/hosts.ini playbooks/apt_upgrade.yml -l ubuntu --extra-vars "@vars.yml" --extra-vars "@secrets.yml"
+cd /opt/ansible/ && ansible-playbook -i inventory/hosts.ini playbooks/apt_upgrade.yml -l ubuntu --extra-vars "@vars.yml" --extra-vars "@secrets.yml"
diff --git a/example_secrets.yml b/example_secrets.yml
index c924705..e4c4142 100644
--- a/example_secrets.yml
+++ b/example_secrets.yml
@@ -1,7 +1,7 @@
 ### Copy this into secrets.yml and replate with a real values ###
 
 # Password used for Ansible to connect to LXC as root (if not using SSH keys)
-ansible_password: 'REPLACE_WITH_ROOT_PASSWORD'
+lxc_root_password: 'REPLACE_WITH_ROOT_PASSWORD'
 # Zabbix proxy parameters for connecting to Zabbix server
 zabbix_server_address: 'x.x.x.x'
 zabbix_psk_identity: '<zabbix_psk_identity'
diff --git a/playbooks/README.md b/playbooks/README.md
index 18b35eb..14396bd 100644
--- a/playbooks/README.md
+++ b/playbooks/README.md
@@ -6,12 +6,13 @@ This directory contains automation playbooks for managing the homelab infrastruc
 
 ### `create_lxc.yml`
 **Creates and bootstraps a new LXC container on Proxmox.**
-- **Input**: Prompts for Container Name and IP Address.
+- **Input**: Prompts for Container Name, IP Address, VMID, CPU Cores, and Memory.
 - **Actions**:
-  1. Connects to Proxmox API to create a new unprivileged LXC container (Ubuntu 24.04).
-  2. Starts the container and waits for connectivity.
-  3. Temporarily adds the host to the inventory.
-  4. Automatically triggers `lxc_setup_ubuntu.yml` to secure the new container.
+  1. Connects to Proxmox API to create a new unprivileged LXC container.
+  2. **Injects SSH Keys**: Uses `vars.yml` to inject public keys directly into `/root/.ssh/authorized_keys` (bypassing password auth).
+  3. Starts the container and waits for connectivity.
+  4. Automatically secures the container (creates `mbuz` user, secures SSH, disables root) effectively running the logic of `lxc_setup_ubuntu.yml`.
+  5. Adds the new host to `inventory/hosts.ini` in the `[lxc]` group.
 
 ### `lxc_setup_ubuntu.yml`
 **Secures a fresh Ubuntu installation.**
diff --git a/playbooks/create_lxc.yml b/playbooks/create_lxc.yml
index 213f721..c564f10 100644
--- a/playbooks/create_lxc.yml
+++ b/playbooks/create_lxc.yml
@@ -40,7 +40,7 @@
         ostemplate: '{{ proxmox_storage }}:vztmpl/ubuntu-24.04-standard_24.04-2_amd64.tar.zst'
         vmid: "{{ container_id }}"
         hostname: "{{ container_name }}"
-        password: "{{ ansible_password }}"
+        password: "{{ lxc_root_password }}"
         pubkey: "{{ my_public_keys | join('\n') }}"
         netif:
           net0: "name=eth0,gw=10.0.0.1,ip={{ container_ip_cidr }},bridge=vmbr0"