24 lines
972 B
YAML
24 lines
972 B
YAML
---
|
|
|
|
- name: Creazione account di gestione Ansible
|
|
user: name=amgmt comment="Ansible Management User" group=wheel state=present password=$6$rounds=100000$XvHuMoXtpCksx379$nhlfUn38.oBB7JrDrtwfUisw8T0Bg5InzFq1fw31mcEmGZ2AYFkFK2zC2g04lSfw.kpdSgqH3Dl5q9r1fY6.k.
|
|
|
|
- name: Creo copia di backup di sudoers
|
|
shell: test -f {{ item }} || cp -fv /etc/sudoers {{ item }}
|
|
with_items:
|
|
- /etc/sudoers.bak
|
|
- /etc/sudoers.tmp
|
|
register: copylog
|
|
changed_when: "'/etc/sudoers' in copylog.stdout"
|
|
|
|
- name: Concessione diritti all'utente di gestione Ansible
|
|
lineinfile: dest=/etc/sudoers.tmp regexp="^amgmt.*NOPASSWD" line="amgmt ALL=(ALL:ALL) NOPASSWD:ALL" state=present
|
|
register: sudotmp
|
|
|
|
- name: Applicazione diritti utente Ansible
|
|
shell: visudo -q -c -f /etc/sudoers.tmp && cp -f /etc/sudoers.tmp /etc/sudoers
|
|
when: sudotmp|changed
|
|
|
|
- name: Installazione chiave privata PC locale
|
|
authorized_key: user=amgmt key="{{ lookup('file', admin_sshkey) }}" state=present
|