band-on-iac/roles/users/tasks/main.yml

22 lines
592 B
YAML

---
- name: Ensure group "admins" exists
# include_tasks: create_groups.yml
ansible.builtin.group:
name: admins
state: present
- name: Grant sudo without PW to admins group
ansible.builtin.file:
src: roles/users/files/sudo_group_admins
path: /etc/sudoers.d/admins
owner: root
group: root
mode: '0440'
- name: Ensure user "rulrich" exists
ansible.builtin.user:
name: rulrich
shell: /bin/bash
groups: admins
append: yes
ssh_public_key: "'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEecPevXnWu9Rs7QhDFAdeKl/E6cBPwUno+nEd4qoUAK rulrich@rabbit'\n"