copy/paste cleanup
This commit is contained in:
parent
28f1381966
commit
23901fb6a7
@ -1,10 +1,10 @@
|
||||
---
|
||||
# defaults file for provision_management_user
|
||||
provision_management_user_name: ansible
|
||||
provision_management_user_group: ansible
|
||||
provision_management_user_name: ubuntu
|
||||
provision_management_user_group: ubuntu
|
||||
provision_management_user_password: "*"
|
||||
provision_management_user_is_system: true
|
||||
provision_management_user_home: /opt/{{ provision_management_user_name }}
|
||||
provision_management_user_is_system: false
|
||||
provision_management_user_home: /home/{{ provision_management_user_name }}
|
||||
provision_management_user_shell: /bin/bash
|
||||
provision_management_user_sudoer: false
|
||||
provision_management_user_add_ssh_key: false
|
||||
|
@ -1,9 +1,9 @@
|
||||
---
|
||||
# task/add_ssh_keys file for provision_ansible_user
|
||||
# task/add_ssh_keys file for provision_management_user
|
||||
- name: "Add key to authorized_keys"
|
||||
ansible.posix.authorized_key:
|
||||
user: "{{ provision_ansible_user_name }}"
|
||||
key: "{{ provision_ansible_user_ssh_key }}"
|
||||
comment: "{{ provision_ansible_user_name }}@{{ ansible_hostname }}"
|
||||
key_options: "{{ provision_ansible_user_ssh_key_options }}"
|
||||
exclusive: "{{ provision_ansible_user_ssh_key_exclusive }}"
|
||||
user: "{{ provision_management_user_name }}"
|
||||
key: "{{ provision_management_user_ssh_key }}"
|
||||
comment: "{{ provision_management_user_name }}@{{ ansible_hostname }}"
|
||||
key_options: "{{ provision_management_user_ssh_key_options }}"
|
||||
exclusive: "{{ provision_management_user_ssh_key_exclusive }}"
|
||||
|
@ -1,27 +1,27 @@
|
||||
---
|
||||
# task/create_user file for provision_ansible_user
|
||||
- name: "Create group {{ provision_ansible_user_group }}"
|
||||
# task/create_user file for provision_management_user
|
||||
- name: "Create group {{ provision_management_user_group }}"
|
||||
ansible.builtin.group:
|
||||
name: "{{ provision_ansible_user_group }}"
|
||||
name: "{{ provision_management_user_group }}"
|
||||
state: present
|
||||
system: "{{ provision_ansible_user_is_system }}"
|
||||
system: "{{ provision_management_user_is_system }}"
|
||||
|
||||
- name: "Create user {{ provision_ansible_user_name }}"
|
||||
- name: "Create user {{ provision_management_user_name }}"
|
||||
ansible.builtin.user:
|
||||
name: "{{ provision_ansible_user_name }}"
|
||||
name: "{{ provision_management_user_name }}"
|
||||
comment: "Ansible service user"
|
||||
password: "{{ provision_ansible_user_password }}"
|
||||
group: "{{ provision_ansible_user_group }}"
|
||||
home: "{{ provision_ansible_user_home }}"
|
||||
shell: "{{ provision_ansible_user_shell }}"
|
||||
system: "{{ provision_ansible_user_is_system }}"
|
||||
password: "{{ provision_management_user_password }}"
|
||||
group: "{{ provision_management_user_group }}"
|
||||
home: "{{ provision_management_user_home }}"
|
||||
shell: "{{ provision_management_user_shell }}"
|
||||
system: "{{ provision_management_user_is_system }}"
|
||||
create_home: true
|
||||
|
||||
- name: "Add user to sudoers"
|
||||
ansible.builtin.copy:
|
||||
dest: "/etc/sudoers.d/{{ provision_ansible_user_name }}"
|
||||
dest: "/etc/sudoers.d/{{ provision_management_user_name }}"
|
||||
owner: root
|
||||
group: root
|
||||
mode: 0640
|
||||
content: "{{ provision_ansible_user_name }} ALL=(ALL) NOPASSWD: ALL"
|
||||
when: provision_ansible_user_sudoer
|
||||
content: "{{ provision_management_user_name }} ALL=(ALL) NOPASSWD: ALL"
|
||||
when: provision_management_user_sudoer
|
||||
|
@ -5,4 +5,4 @@
|
||||
|
||||
- name: "Import add_ssh_keys.yml"
|
||||
ansible.builtin.include_tasks: add_ssh_keys.yml
|
||||
when: provision_ansible_user_add_ssh_key
|
||||
when: provision_management_user_add_ssh_key
|
||||
|
Loading…
Reference in New Issue
Block a user