homeserver/playbooks/base/1_bootstrap.yml

---
  - hosts: all
    become: yes
    gather_facts: false
    max_fail_percentage: 20%

    roles:
      - { role: robertdebock.bootstrap,
        tags: "bootstrap"
        }
      - { role: ryandaniels.create_users,
        tags: "user",
        become: yes
        }
      - { role: nickjj.ansible-user,
        tag: "ansible",
        become: yes,
        ansible_password: "{{ lookup('keepass', 'linux_mg_user_password_cleartext', 'password') }}",
        ansible_become_password: "{{ lookup('keepass', 'linux_mg_user_password_cleartext', 'password') }}"
        }
    tasks:
      - name: Change user password
        user:
          name: mg
          update_password: always
          password: "{{ lookup('keepass', 'linux_mg_user_password_hash', 'password') }}"

    vars:
      ### nickjj.ansible-users
      user_name: "ansible-user"
      user_local_ssh_key_path: "/home/mg/ansible/id_rsa_ansible_user_pub"
      user_enable_passwordless_sudo: True
      ### reobertdebock.bootstrap
      bootstrap_user: mg
      bootstrap_wait_for_host: no
      bootstrap_timeout: 1
      ### ansible
      ansible_user: "mg"
      ansible_password: "hallowelt"
      ansible_become_password: "hallowelt"
      ansible_ssh_common_args: "'-o StrictHostKeyChecking=no'"

# Nach dem ersten durchlaufen ist keine Anmeldung mehr per Passwort & ssh möglich. Somit scheitert auch der Versuch das Playbook ein zweites mal durchlaufen zu lassen.