mg
347d80a8a4
Co-authored-by: Michael Grote <michael.grote@posteo.de> Reviewed-on: mg/ansible#270 Co-authored-by: mg <michael.grote@posteo.de> Co-committed-by: mg <michael.grote@posteo.de>
34 lines
868 B
YAML
34 lines
868 B
YAML
---
|
|
- name: ensure group exists
|
|
become: true
|
|
ansible.builtin.group:
|
|
name: "{{ rasdaemon_user_group }}"
|
|
state: present
|
|
when:
|
|
- rasdaemon_user_group is defined
|
|
|
|
- name: ensure user exists
|
|
become: true
|
|
ansible.builtin.user:
|
|
name: "{{ rasdaemon_user }}"
|
|
group: "{{ rasdaemon_user_group }}"
|
|
shell: /usr/sbin/nologin
|
|
when:
|
|
- rasdaemon_user_group is defined
|
|
- rasdaemon_user is defined
|
|
|
|
- name: add user to sudoers
|
|
become: true
|
|
ansible.builtin.blockinfile:
|
|
path: /etc/sudoers
|
|
state: present
|
|
block: |
|
|
{{ rasdaemon_user }} ALL=(ALL) NOPASSWD:ALL
|
|
validate: '/usr/sbin/visudo -cf %s'
|
|
backup: yes
|
|
marker_begin: rasdaemon-sudoers
|
|
marker_end: rasdaemon-sudoers
|
|
when:
|
|
- rasdaemon_user_group is defined
|
|
- rasdaemon_user is defined
|