@@ -65,6 +65,11 @@ baseline_packages_extra: []
# provisions on every host. Service users (e.g. 'cast' for podman
# workloads) are created by their respective application roles, not here.
baseline_users:
- name: wed
comment: "Default admin user"
shell: /bin/bash
groups: "{{ baseline_sudo_group }}"
sudo_nopasswd: true
- name: jarvis
comment: "JARVIS automation account"
shell: /bin/bash
@@ -72,6 +77,11 @@ baseline_users:
sudo_nopasswd: true
ssh_authorized_keys:
- "{{ jarvis_ssh_public_key }}"
- name: rblundon
comment: "Ryan Blundon"
shell: /bin/bash
groups: "{{ baseline_sudo_group }}"
sudo_nopasswd: true
# ---------------------------------------------------------------------------
# SSH hardening