92b2a9d609
- Move all roles from playbooks/roles/ to roles/ - Update roles_path in ansible.cfg - Add cast user to common role - Create standalone podman role - Add semaphore role with Podman + Quadlet support
30 lines
744 B
YAML
30 lines
744 B
YAML
---
|
|
- name: Create jarvis group
|
|
ansible.builtin.group:
|
|
name: "{{ jarvis_group }}"
|
|
state: present
|
|
system: false
|
|
|
|
- name: Create jarvis user
|
|
ansible.builtin.user:
|
|
name: "{{ jarvis_user }}"
|
|
group: "{{ jarvis_group }}"
|
|
shell: "{{ jarvis_shell }}"
|
|
create_home: true
|
|
state: present
|
|
|
|
- name: Deploy SSH public key
|
|
ansible.posix.authorized_key:
|
|
user: "{{ jarvis_user }}"
|
|
key: "{{ lookup('file', '~/.ssh/id_jarvis.pub') }}"
|
|
state: present
|
|
exclusive: true
|
|
|
|
- name: Grant passwordless sudo
|
|
ansible.builtin.copy:
|
|
dest: "/etc/sudoers.d/{{ jarvis_user }}"
|
|
content: "{{ jarvis_user }} ALL=(ALL) NOPASSWD:ALL\n"
|
|
owner: root
|
|
group: root
|
|
mode: '0440'
|
|
when: jarvis_sudo_nopasswd | bool |