homeserver/group_vars/pbs.yml

---
  ### mgrote.postfix
  postfix_erlaubte_netzwerke: "127.0.0.0/8 192.168.2.0/24 192.168.3.0/24"

  ### mgrote.restic
  restic_folders_to_backup: "/ /etc/proxmox-backup"

  ### mgrote.user
  users:
    - username: root
      password: "{{ lookup('keepass', 'root_linux_password_hash_proxmox', 'password') }}"
      update_password: always
      groups: ssh, sudo, root
      state: present
      allow_sudo: true
      allow_passwordless_sudo: true
    - username: mg
      password: "{{ lookup('keepass', 'mg_linux_password_hash', 'password') }}"
      update_password: always
      groups: ssh, sudo
      state: present
      public_ssh_key: "{{ ssh_public_key_mg }}"
      allow_sudo: true
      allow_passwordless_sudo: true
    - username: ansible-user
      password: "{{ lookup('keepass', 'ansible_user_linux_password_hash', 'password') }}"
      update_password: always
      groups: ssh, sudo
      state: present
      public_ssh_key: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJcBwOjanQV6sFWaTetqpl20SVe3aRzGjKbsp7hKkDCE mg@irantu
      allow_sudo: true
      allow_passwordless_sudo: true