hosts

@@ -1,5 +0,0 @@
-[testing]
-test.band-on.com
-
-[production]
-band-on.com

playbook.yml

@@ -1,15 +0,0 @@
----
-- hosts: production
-  become: true
-#  vars_files:
-#    - vars/production/users.yml
-  roles: 
-    - users
-- hosts: testing
-  become: true
-#  vars_files: 
-#    - vars/testing/users.yml
-  roles: 
-    - users
-
-

roles/users/files/sudo_group_admins

@@ -1 +0,0 @@
-%admins ALL=(ALL) NOPASSWD: ALL    

roles/users/tasks/main.yml

@@ -1,23 +0,0 @@
----
-- name: Ensure group "admins" exists
-# include_tasks: create_groups.yml
-  ansible.builtin.group:
-    name: admins
-    state: present
-    tags: groups
-
-- name: Grant sudo without PW to admins group
-  ansible.builtin.file:
-    src: roles/users/files/sudo_group_admins
-    path: /etc/sudoers.d/admins
-    owner: root
-    group: root
-    mode: '0440'
-
-- name: Ensure user "rulrich" exists
-  ansible.builtin.user:
-    name: rulrich
-    shell: /bin/bash
-    groups: admins
-    append: yes
-    ssh_public_key: "'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEecPevXnWu9Rs7QhDFAdeKl/E6cBPwUno+nEd4qoUAK rulrich@rabbit'\n"