infra/ansible/roles/bootstrap/tasks/ansible.yml
2025-05-30 13:24:38 -05:00

44 lines
885 B
YAML

- name: Install sudo
apt:
name: sudo
when: ansible_distribution == "Debian"
- name: Ensure the 'ansible' group exists
group:
name: ansible
gid: 10001
state: present
- name: Ensure the 'ansible' user exists
user:
name: ansible
comment: Ansible User
uid: 10001
group: ansible
- name: Ensure the 'graham' user exists
user:
name: graham
comment: Graham
- name: Ensure the 'andy' user exists
user:
name: andy
comment: Andy
- name: Ensure that 'authorized_keys' is set correctly for the 'ansible' user
authorized_key:
user: ansible
state: present
key: "{{ lookup('file', 'files/ansible.pub') }}"
- name: Ensure sudo is configured for the 'ansible' user
template:
src: templates/etc/sudoers.d/ansible
dest: /etc/sudoers.d/ansible
owner: root
group: root
mode: '0440'
tags:
- sudoers