39 lines
928 B
YAML
39 lines
928 B
YAML
---
|
|
# - name: Create primary admin user
|
|
# ansible.builtin.user:
|
|
# name: sysadmin
|
|
# groups: sudo
|
|
# append: yes
|
|
# shell: /bin/bash
|
|
# create_home: yes
|
|
# become: true
|
|
|
|
# - name: Add SSH public key for sysadmin
|
|
# ansible.posix.authorized_key:
|
|
# user: sysadmin
|
|
# state: present
|
|
# key: "{{ sysadmin_public_ssh_key }}"
|
|
# become: true
|
|
|
|
# - name: Allow passwordless sudo to sysadmin user
|
|
# ansible.builtin.copy:
|
|
# dest: /etc/sudoers.d/sysadmin
|
|
# content: "sysadmin ALL=(ALL) NOPASSWD: ALL"
|
|
# mode: "0440"
|
|
# validate: /usr/sbin/visudo -cf %s
|
|
# become: true
|
|
|
|
- name: Create deployment user for CI/CD
|
|
ansible.builtin.user:
|
|
name: deployment
|
|
shell: /bin/bash
|
|
create_home: yes
|
|
become: true
|
|
|
|
- name: Add SSH public key for deployment user
|
|
ansible.posix.authorized_key:
|
|
user: deployment
|
|
state: present
|
|
key: "{{ deployment_public_ssh_key }}"
|
|
become: true
|