server-config/roles/init/tasks/mgmtuser.yml

24 lines
972 B
YAML

---
- name: Creazione account di gestione Ansible
user: name=amgmt comment="Ansible Management User" group=wheel state=present password=$6$rounds=100000$XvHuMoXtpCksx379$nhlfUn38.oBB7JrDrtwfUisw8T0Bg5InzFq1fw31mcEmGZ2AYFkFK2zC2g04lSfw.kpdSgqH3Dl5q9r1fY6.k.
- name: Creo copia di backup di sudoers
shell: test -f {{ item }} || cp -fv /etc/sudoers {{ item }}
with_items:
- /etc/sudoers.bak
- /etc/sudoers.tmp
register: copylog
changed_when: "'/etc/sudoers' in copylog.stdout"
- name: Concessione diritti all'utente di gestione Ansible
lineinfile: dest=/etc/sudoers.tmp regexp="^amgmt.*NOPASSWD" line="amgmt ALL=(ALL:ALL) NOPASSWD:ALL" state=present
register: sudotmp
- name: Applicazione diritti utente Ansible
shell: visudo -q -c -f /etc/sudoers.tmp && cp -f /etc/sudoers.tmp /etc/sudoers
when: sudotmp|changed
- name: Installazione chiave privata PC locale
authorized_key: user=amgmt key="{{ lookup('file', admin_sshkey) }}" state=present