Fix fresh server user and sudoers setup
This commit is contained in:
+13
-5
@@ -1,10 +1,10 @@
|
|||||||
---
|
---
|
||||||
- name: Check if robert user exists
|
- name: Check if robert user exists
|
||||||
getent:
|
ansible.builtin.command:
|
||||||
database: passwd
|
cmd: id -u robert
|
||||||
key: robert
|
|
||||||
fail_key: false
|
|
||||||
register: robert_user
|
register: robert_user
|
||||||
|
changed_when: false
|
||||||
|
failed_when: false
|
||||||
|
|
||||||
- name: Create robert user
|
- name: Create robert user
|
||||||
user:
|
user:
|
||||||
@@ -14,13 +14,21 @@
|
|||||||
shell: /bin/bash
|
shell: /bin/bash
|
||||||
create_home: yes
|
create_home: yes
|
||||||
password: "{{ robert_password_hash }}"
|
password: "{{ robert_password_hash }}"
|
||||||
when: robert_user.ansible_facts.getent_passwd.robert is not defined
|
when: robert_user.rc != 0
|
||||||
|
|
||||||
- name: create ansible user
|
- name: create ansible user
|
||||||
user:
|
user:
|
||||||
name: ansible
|
name: ansible
|
||||||
system: yes
|
system: yes
|
||||||
|
|
||||||
|
- name: Ensure sudoers directory exists
|
||||||
|
ansible.builtin.file:
|
||||||
|
path: /etc/sudoers.d
|
||||||
|
state: directory
|
||||||
|
owner: root
|
||||||
|
group: root
|
||||||
|
mode: '0750'
|
||||||
|
|
||||||
- name: copy sudoers_ansible
|
- name: copy sudoers_ansible
|
||||||
copy:
|
copy:
|
||||||
src: files/sudoers_ansible
|
src: files/sudoers_ansible
|
||||||
|
|||||||
Reference in New Issue
Block a user