From 15ed271490f52fd856159823ddff2e3471d69cae Mon Sep 17 00:00:00 2001
From: Stefan Haun <tux@netz39.de>
Date: Sun, 12 Jan 2025 12:55:41 +0100
Subject: [PATCH 1/3] Add note on host Rhodium to inventory

---
 inventory.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/inventory.yml b/inventory.yml
index 4263588..76a969d 100644
--- a/inventory.yml
+++ b/inventory.yml
@@ -19,6 +19,8 @@ all:
     k3s-w1.n39.eu:
     k3s-w2.n39.eu:
     k3s-w3.n39.eu:
+#   Host rhodium.n39.eu is the OpenWRT router, but cannot be added here
+#   as it would be treated like a Debian host
 
   children:
     docker_host:

From 8a692376d37883327939fd8ffd5dc8def3af6d77 Mon Sep 17 00:00:00 2001
From: Stefan Haun <tux@netz39.de>
Date: Sun, 12 Jan 2025 12:55:56 +0100
Subject: [PATCH 2/3] Add SSH entry for host Rhodium

Please note that it is still necessary to
manually add the SSH keys to the OpenWRT config.
---
 templates/ssh_config.j2 | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/templates/ssh_config.j2 b/templates/ssh_config.j2
index 8dcadf2..411b381 100644
--- a/templates/ssh_config.j2
+++ b/templates/ssh_config.j2
@@ -25,3 +25,11 @@ Host {{ host }}
   Port 22
 
 {% endfor %}
+
+{# This is our router #}
+Host rhodium.n39.eu
+  Hostname rhodium.n39.eu
+  IdentityFile {{ setup_ssh_key }}
+  User root
+  ProxyJump ssh.n39.eu
+  Port 22

From 50d1b6098d8e959f57f0419d4dd01f8e2f1cbd6c Mon Sep 17 00:00:00 2001
From: Stefan Haun <tux@netz39.de>
Date: Sun, 12 Jan 2025 12:57:49 +0100
Subject: [PATCH 3/3] Make a note about adding SSH keys to host Rhodium

---
 README.md | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/README.md b/README.md
index 1ecdf32..92bff30 100644
--- a/README.md
+++ b/README.md
@@ -20,6 +20,9 @@ SSH_KEY=<absolute/path/to/ssh/private/key>
 ansible-playbook setup-ssh.yml --ask-vault-pass -e "setup_ssh_logname=$LOGUSER" -e "setup_ssh_key=$SSH_KEY"
 ```
 
+This playbook also adds `rhodium.n39.eu` (OpenWRT router), but our Ansible cannot set up SSH keys (yet).
+Please [add your key to OpenWRT manually](https://openwrt.org/docs/guide-user/security/dropbear.public-key.auth#from_the_luci_web_interface).
+
 ## Edit vault encrypted vars files
 
 ```bash