ansible/group_vars/all

@@ -89,3 +89,6 @@
   node_exporter_user: node_exporter
   node_exporter_group: node_exporter
   node_exporter_port: 9100
+
+# CentOS Repo
+  centos_base_url: "http://vault.centos.org"

ansible/roles/fix_centos_repo/tasks/main.yaml

@@ -15,6 +15,6 @@
   ansible.builtin.replace:
     path: "{{ item }}"
     regexp: '^#baseurl=http://mirror.centos.org'
-    replace: 'baseurl=http://vault.centos.org'
+    replace: 'baseurl={{ centos_base_url }}'
     backup: yes
   with_items: "{{ repo_files.stdout_lines }}"

ansible/roles/ldap_config/tasks/main.yml

@@ -7,7 +7,6 @@
     - nss-pam-ldapd
     - openldap
     - openldap-clients
-    - openldap-servers
     - sssd-ldap
 
 - name: Update nsswitch.conf to look for ldap

ansible/roles/ssh_proxy_config/templates/sshpiperd.yaml.j2

@@ -24,5 +24,11 @@ pipes:
     host: "{{ group.host }}"
     ignore_hostkey: true
     private_key: "{{ group.private_key }}"
+- from:
+    - username: ".*"
+      username_regex_match: true
+  to:
+    host: "{{ group.host }}"
+    ignore_hostkey: true
 {% endif %}
 {% endfor %}