2022-06-23 16:17:42 +02:00
|
|
|
# yamllint disable rule:line-length
|
2019-01-18 15:30:42 +01:00
|
|
|
---
|
2020-10-13 16:03:54 +02:00
|
|
|
- name: "Group '{{ user.name }}' is present"
|
|
|
|
group:
|
|
|
|
state: present
|
|
|
|
name: "{{ user.name }}"
|
|
|
|
gid: "{{ user.uid }}"
|
2022-01-06 12:01:22 +01:00
|
|
|
tags:
|
2022-06-23 18:35:39 +02:00
|
|
|
- accounts
|
2022-01-06 12:01:22 +01:00
|
|
|
- admin
|
2020-10-13 16:03:54 +02:00
|
|
|
|
2019-01-18 15:30:42 +01:00
|
|
|
- name: "User '{{ user.name }}' is present"
|
|
|
|
user:
|
|
|
|
state: present
|
|
|
|
name: '{{ user.name }}'
|
|
|
|
uid: '{{ user.uid }}'
|
|
|
|
password: '{{ user.password_hash_openbsd }}'
|
2020-10-13 16:03:54 +02:00
|
|
|
group: "{{ user.name }}"
|
2019-01-18 15:30:42 +01:00
|
|
|
groups: wheel
|
|
|
|
shell: /bin/ksh
|
2019-09-19 23:07:01 +02:00
|
|
|
append: true
|
2019-01-18 15:30:42 +01:00
|
|
|
tags:
|
2022-06-23 18:35:39 +02:00
|
|
|
- accounts
|
2019-01-18 15:30:42 +01:00
|
|
|
- admin
|
|
|
|
|
2020-10-13 16:03:54 +02:00
|
|
|
- name: "Home directory for '{{ user.name }}' is only accesible by owner"
|
|
|
|
file:
|
|
|
|
name: '/home/{{ user.name }}'
|
|
|
|
mode: "0700"
|
2020-10-13 16:16:52 +02:00
|
|
|
owner: "{{ user.name }}"
|
|
|
|
group: "{{ user.name }}"
|
2020-10-13 16:03:54 +02:00
|
|
|
state: directory
|
2022-01-06 12:01:22 +01:00
|
|
|
tags:
|
2022-06-23 18:35:39 +02:00
|
|
|
- accounts
|
2022-01-06 12:01:22 +01:00
|
|
|
- admin
|
2020-10-13 16:03:54 +02:00
|
|
|
|
2019-01-18 15:30:42 +01:00
|
|
|
- name: "SSH public keys for '{{ user.name }}' are present"
|
|
|
|
authorized_key:
|
|
|
|
user: "{{ user.name }}"
|
|
|
|
key: "{{ ssk_key }}"
|
|
|
|
state: present
|
|
|
|
with_items: "{{ user.ssh_keys }}"
|
|
|
|
loop_control:
|
|
|
|
loop_var: ssk_key
|
2019-01-18 21:05:37 +01:00
|
|
|
when: user.ssh_keys is defined
|
|
|
|
tags:
|
2022-06-23 18:35:39 +02:00
|
|
|
- accounts
|
2019-09-19 23:07:01 +02:00
|
|
|
- admin
|
|
|
|
|
2022-01-06 12:01:22 +01:00
|
|
|
- name: "Add {{ user.name }} to {{ evobsd_internal_group }}, {{ evobsd_ssh_group }}, {{ evobsd_sudo_group }} group"
|
2020-10-15 11:01:52 +02:00
|
|
|
user:
|
|
|
|
name: "{{ user.name }}"
|
2022-01-25 17:28:28 +01:00
|
|
|
groups: "{{ groups_item }}"
|
2020-04-21 11:27:43 +02:00
|
|
|
append: true
|
2022-01-06 12:01:22 +01:00
|
|
|
with_items:
|
|
|
|
- "{{ evobsd_internal_group }}"
|
|
|
|
- "{{ evobsd_ssh_group }}"
|
|
|
|
- "{{ evobsd_sudo_group }}"
|
2022-01-25 17:28:28 +01:00
|
|
|
loop_control:
|
|
|
|
loop_var: groups_item
|
2020-04-21 11:27:43 +02:00
|
|
|
tags:
|
2022-06-23 18:35:39 +02:00
|
|
|
- accounts
|
2020-04-21 11:27:43 +02:00
|
|
|
- admin
|