#
# Cookbook:: irrigate-tunnel
# Recipe:: looker
#
# Copyright: The Orchard
#

user node['looker']['user'] do
  comment 'looker proxy user'
  home node['looker']['home_dir']
  shell '/bin/false'
end

ssh_authorize_key 'looker_user_key' do
  key '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'
  user node['looker']['user']
end

# CentOS sshd is old and doesn't support the accept-new option.
# Looker does not provide host keys
openssh_server node['sshd']['config_file'] do
  PasswordAuthentication 'no'
  AllowTcpForwarding 'yes'
  X11Forwarding 'no'
  AllowAgentForwarding 'no'
  PermitOpen 'statementdb.theorchard.com:3306 reportsar.theorchard.com:3306'
end