2015-07-07 23:41:59 +02:00
|
|
|
---
|
2015-09-14 00:23:31 +02:00
|
|
|
# Initialization task (for simpler ansible management)
|
2015-07-07 23:41:59 +02:00
|
|
|
|
2015-09-14 00:23:31 +02:00
|
|
|
- name: Setting up sudoers for root
|
2015-07-14 22:47:00 +02:00
|
|
|
lineinfile:
|
|
|
|
dest: /etc/sudoers.d/root
|
|
|
|
regexp: "^root.*NOPASSWD"
|
|
|
|
line: "root ALL=(ALL:ALL) NOPASSWD:ALL"
|
|
|
|
owner: root
|
|
|
|
group: root
|
|
|
|
mode: 0440
|
|
|
|
create: yes
|
|
|
|
state: present
|
|
|
|
validate: '/usr/sbin/visudo -c -f %s'
|
|
|
|
|
2015-09-14 00:23:31 +02:00
|
|
|
- name: Creating Ansible Management User
|
|
|
|
user:
|
|
|
|
name: amgmt
|
|
|
|
comment: "Ansible Management User"
|
|
|
|
group: users
|
|
|
|
password: $6$rounds=100000$XvHuMoXtpCksx379$nhlfUn38.oBB7JrDrtwfUisw8T0Bg5InzFq1fw31mcEmGZ2AYFkFK2zC2g04lSfw.kpdSgqH3Dl5q9r1fY6.k.
|
|
|
|
shell: /bin/bash
|
|
|
|
state: present
|
|
|
|
generate_ssh_key: yes
|
|
|
|
|
|
|
|
- name: Setting up sudoers for Ansible Management User
|
2015-07-07 23:41:59 +02:00
|
|
|
lineinfile:
|
|
|
|
dest: /etc/sudoers.d/amgmt
|
|
|
|
regexp: "^amgmt.*NOPASSWD"
|
|
|
|
line: "amgmt ALL=(ALL:ALL) NOPASSWD:ALL"
|
|
|
|
owner: root
|
|
|
|
group: root
|
|
|
|
mode: 0440
|
|
|
|
create: yes
|
|
|
|
state: present
|
2015-07-08 10:31:01 +02:00
|
|
|
validate: '/usr/sbin/visudo -c -f %s'
|
2015-07-07 23:41:59 +02:00
|
|
|
|
2015-09-14 00:23:31 +02:00
|
|
|
- name: Authorizing Ansible Management User's key from server
|
2015-07-08 02:16:16 +02:00
|
|
|
authorized_key:
|
|
|
|
user: amgmt
|
2015-09-21 01:32:56 +02:00
|
|
|
key: "{{ lookup('pipe', 'curl -sSL http://' + ansible_local.domain.serverfqdn + ':3000/mgmtkey') }}"
|
2015-07-08 02:16:16 +02:00
|
|
|
state: present
|