homeserver/roles/mgrote.ecc-rasdaemon/tasks/user.yml

34 lines
868 B
YAML
Raw Normal View History

---
- name: ensure group exists
become: true
ansible.builtin.group:
name: "{{ rasdaemon_user_group }}"
state: present
when:
- rasdaemon_user_group is defined
- name: ensure user exists
become: true
ansible.builtin.user:
name: "{{ rasdaemon_user }}"
group: "{{ rasdaemon_user_group }}"
shell: /usr/sbin/nologin
when:
- rasdaemon_user_group is defined
- rasdaemon_user is defined
- name: add user to sudoers
become: true
ansible.builtin.blockinfile:
path: /etc/sudoers
state: present
block: |
{{ rasdaemon_user }} ALL=(ALL) NOPASSWD:ALL
validate: '/usr/sbin/visudo -cf %s'
backup: yes
marker_begin: rasdaemon-sudoers
marker_end: rasdaemon-sudoers
when:
- rasdaemon_user_group is defined
- rasdaemon_user is defined