disable password by default for service account

This commit is contained in:
Bertrand Lanson 2023-03-26 20:57:15 +02:00
parent cb65705ebc
commit c81b770732
3 changed files with 5 additions and 3 deletions

View File

@ -1,7 +1,7 @@
---
# defaults file for provision_ansible_user
provision_ansible_user_name: ansible
provision_ansible_user_password: supersecretpassword
provision_ansible_user_password: "*"
provision_ansible_user_is_system: true
provision_ansible_user_shell: /bin/bash
provision_ansible_user_sudoer: false

View File

@ -1,10 +1,11 @@
---
provision_ansible_user_name: ansible
provision_ansible_user_password: supersecretpassword
provision_ansible_user_group: ansible
provision_ansible_user_password: "*"
provision_ansible_user_is_system: true
provision_ansible_user_shell: /bin/bash
provision_ansible_user_sudoer: true
provision_ansible_user_add_ssh_key: true
provision_ansible_user_ssh_key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF17FFrBY4dZyvJ7Yf1Ev4NA2+/tW5krKxVrpq45Cujg lanson@lead"
provision_ansible_user_ssh_key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIClfmTk73wNNL2jwvhRUmUuy80JRrz3P7cEgXUqlc5O9"
provision_ansible_user_ssh_key_options: ""
provision_ansible_user_ssh_key_exclusive: true

View File

@ -1,5 +1,6 @@
---
# task/create_user file for provision_ansible_user
- name: "Create group {{ provision_ansible_user_group }}"
- name: "Create user {{ provision_ansible_user_name }}"
ansible.builtin.user:
name: "{{ provision_ansible_user_name }}"