Fix fresh server user and sudoers setup
This commit is contained in:
+13
-5
@@ -1,10 +1,10 @@
|
||||
---
|
||||
- name: Check if robert user exists
|
||||
getent:
|
||||
database: passwd
|
||||
key: robert
|
||||
fail_key: false
|
||||
ansible.builtin.command:
|
||||
cmd: id -u robert
|
||||
register: robert_user
|
||||
changed_when: false
|
||||
failed_when: false
|
||||
|
||||
- name: Create robert user
|
||||
user:
|
||||
@@ -14,13 +14,21 @@
|
||||
shell: /bin/bash
|
||||
create_home: yes
|
||||
password: "{{ robert_password_hash }}"
|
||||
when: robert_user.ansible_facts.getent_passwd.robert is not defined
|
||||
when: robert_user.rc != 0
|
||||
|
||||
- name: create ansible user
|
||||
user:
|
||||
name: ansible
|
||||
system: yes
|
||||
|
||||
- name: Ensure sudoers directory exists
|
||||
ansible.builtin.file:
|
||||
path: /etc/sudoers.d
|
||||
state: directory
|
||||
owner: root
|
||||
group: root
|
||||
mode: '0750'
|
||||
|
||||
- name: copy sudoers_ansible
|
||||
copy:
|
||||
src: files/sudoers_ansible
|
||||
|
||||
Reference in New Issue
Block a user