28 lines
967 B
YAML
28 lines
967 B
YAML
---
|
|
# task/create_user file for provision_ansible_user
|
|
- name: "Create group {{ provision_ansible_user_group }}"
|
|
ansible.builtin.group:
|
|
name: "{{ provision_ansible_user_group }}"
|
|
state: present
|
|
system: "{{ provision_ansible_user_is_system }}"
|
|
|
|
- name: "Create user {{ provision_ansible_user_name }}"
|
|
ansible.builtin.user:
|
|
name: "{{ provision_ansible_user_name }}"
|
|
comment: "Ansible service user"
|
|
password: "{{ provision_ansible_user_password }}"
|
|
group: "{{ provision_ansible_user_group }}"
|
|
home: "{{ provision_ansible_user_home }}"
|
|
shell: "{{ provision_ansible_user_shell }}"
|
|
system: "{{ provision_ansible_user_is_system }}"
|
|
create_home: true
|
|
|
|
- name: "Add user to sudoers"
|
|
ansible.builtin.copy:
|
|
dest: "/etc/sudoers.d/{{ provision_ansible_user_name }}"
|
|
owner: root
|
|
group: root
|
|
mode: 0640
|
|
content: "{{ provision_ansible_user_name }} ALL=(ALL) NOPASSWD: ALL"
|
|
when: provision_ansible_user_sudoer
|