mirror of
https://github.com/AsgardEternal/Ubuntu-Ansible-Setup.git
synced 2024-09-29 18:04:22 -05:00
43 lines
1.0 KiB
YAML
43 lines
1.0 KiB
YAML
---
|
|
- name: Create Superusers
|
|
become: true
|
|
ansible.builtin.user:
|
|
name: "{{ item.username }}"
|
|
groups:
|
|
- sudo
|
|
create_home: true
|
|
shell: /bin/bash
|
|
loop: "{{ superusers }}"
|
|
|
|
- name: Generate .ssh Directories for Superusers
|
|
become: true
|
|
ansible.builtin.file:
|
|
state: directory
|
|
path: "/home/{{ item.username }}/.ssh/"
|
|
mode: 0700
|
|
owner: "{{ item.username }}"
|
|
group: "{{ item.username }}"
|
|
loop: "{{ superusers }}"
|
|
|
|
- name: Deploy Public Keys to authorized_keys Files
|
|
become: true
|
|
ansible.builtin.template:
|
|
src: templates/authorized_keys.j2
|
|
dest: "/home/{{ item.username }}/.ssh/authorized_keys"
|
|
mode: 0600
|
|
owner: "{{ item.username }}"
|
|
group: "{{ item.username }}"
|
|
loop: "{{ superusers }}"
|
|
|
|
- name: Allow Superusers Passwordless Sudo
|
|
become: true
|
|
ansible.builtin.template:
|
|
src: templates/passwordless_sudo_entry.j2
|
|
dest: "/etc/sudoers.d/00_{{ item.username }}"
|
|
mode: 0440
|
|
owner: root
|
|
group: root
|
|
force: true
|
|
loop: "{{ superusers }}"
|
|
|