alessandrovitali
0191f60e8b
users/tasks/main.yml functions as a thin dispatcher with logical steps imported from their own files gated by a variable
25 lines
593 B
YAML
25 lines
593 B
YAML
---
|
|
- name: Create primary sysadmin user
|
|
ansible.builtin.user:
|
|
name: "{{ sysadmin_user }}"
|
|
groups: sudo
|
|
append: yes
|
|
shell: /bin/bash
|
|
create_home: yes
|
|
become: true
|
|
|
|
- name: Add SSH public key for sysadmin
|
|
ansible.posix.authorized_key:
|
|
user: "{{ sysadmin_user }}"
|
|
state: present
|
|
key: "{{ sysadmin_public_ssh_key }}"
|
|
become: true
|
|
|
|
- name: Allow passwordless sudo for sudo group
|
|
ansible.builtin.copy:
|
|
dest: /etc/sudoers.d/sudo-nopasswd
|
|
content: "%sudo ALL=(ALL) NOPASSWD: ALL"
|
|
mode: "0440"
|
|
validate: /usr/sbin/visudo -cf %s
|
|
become: true
|