Compare commits
1 Commits
f85285d07a
...
main
| Author | SHA1 | Date | |
|---|---|---|---|
|
f12fe903de
|
@@ -26,7 +26,7 @@ jobs:
|
|||||||
with:
|
with:
|
||||||
python-version: "3.13"
|
python-version: "3.13"
|
||||||
- name: Intall test dependencies
|
- name: Intall test dependencies
|
||||||
run: pip3 install yamllint=1.37.1 ansible-lint==25.12.0
|
run: pip3 install yamllint==1.37.1 ansible-lint==25.12.0
|
||||||
- name: Lint code with yamllint
|
- name: Lint code with yamllint
|
||||||
run: "yamllint ."
|
run: "yamllint ."
|
||||||
- name: Lint code with yamllint
|
- name: Lint code with yamllint
|
||||||
|
|||||||
@@ -8,7 +8,7 @@
|
|||||||
package:
|
package:
|
||||||
update_cache: true
|
update_cache: true
|
||||||
cache_valid_time: 600
|
cache_valid_time: 600
|
||||||
when: ansible_os_family == 'Debian'
|
when: ansible_facts["os_family"] == 'Debian'
|
||||||
|
|
||||||
- name: Ensure build dependencies are installed (RedHat).
|
- name: Ensure build dependencies are installed (RedHat).
|
||||||
package:
|
package:
|
||||||
@@ -16,13 +16,13 @@
|
|||||||
- openssh-server
|
- openssh-server
|
||||||
- openssh-clients
|
- openssh-clients
|
||||||
state: present
|
state: present
|
||||||
when: ansible_os_family == 'RedHat'
|
when: ansible_facts["os_family"] == 'RedHat'
|
||||||
|
|
||||||
- name: Ensure build dependencies are installed (Fedora).
|
- name: Ensure build dependencies are installed (Fedora).
|
||||||
package:
|
package:
|
||||||
name: procps
|
name: procps
|
||||||
state: present
|
state: present
|
||||||
when: ansible_distribution == 'Fedora'
|
when: ansible_facts["distribution"] == 'Fedora'
|
||||||
|
|
||||||
- name: Ensure build dependencies are installed (Debian).
|
- name: Ensure build dependencies are installed (Debian).
|
||||||
package:
|
package:
|
||||||
@@ -30,7 +30,7 @@
|
|||||||
- openssh-server
|
- openssh-server
|
||||||
- openssh-client
|
- openssh-client
|
||||||
state: present
|
state: present
|
||||||
when: ansible_os_family == 'Debian'
|
when: ansible_facts["os_family"] == 'Debian'
|
||||||
|
|
||||||
- name: Ensure auth.log file is present.
|
- name: Ensure auth.log file is present.
|
||||||
copy:
|
copy:
|
||||||
@@ -38,7 +38,7 @@
|
|||||||
content: ""
|
content: ""
|
||||||
force: false
|
force: false
|
||||||
mode: 0644
|
mode: 0644
|
||||||
when: ansible_distribution == 'Debian'
|
when: ansible_facts["distribution"] == 'Debian'
|
||||||
|
|
||||||
roles:
|
roles:
|
||||||
- role: palkx.users
|
- role: palkx.users
|
||||||
|
|||||||
@@ -7,7 +7,7 @@
|
|||||||
|
|
||||||
- name: Create users
|
- name: Create users
|
||||||
ansible.builtin.include_tasks: user.yml
|
ansible.builtin.include_tasks: user.yml
|
||||||
when: ansible_default_ipv4.address in users[username]['passwords'] or users[username]['passwords'].get('default', None) is not None
|
when: ansible_default_ipv4.address in users[username]['passwords'] or users[username]['passwords'].get('default', '') != ''
|
||||||
with_items: "{{ users.keys() }}"
|
with_items: "{{ users.keys() }}"
|
||||||
loop_control:
|
loop_control:
|
||||||
loop_var: username
|
loop_var: username
|
||||||
|
|||||||
@@ -11,15 +11,15 @@
|
|||||||
ansible.builtin.user:
|
ansible.builtin.user:
|
||||||
name: "{{ username }}"
|
name: "{{ username }}"
|
||||||
password: "{{ users[username]['passwords'].get(ansible_default_ipv4.address) }}"
|
password: "{{ users[username]['passwords'].get(ansible_default_ipv4.address) }}"
|
||||||
when: "ansible_default_ipv4.address in users[username]['passwords'] and
|
when: "ansible_facts['default_ipv4'].address in users[username]['passwords'] and
|
||||||
users[username]['passwords'].get(ansible_default_ipv4.address) != 'default'"
|
users[username]['passwords'].get(ansible_facts['default_ipv4'].address) != 'default'"
|
||||||
|
|
||||||
- name: "Set default password for user `{{ username }}`"
|
- name: "Set default password for user `{{ username }}`"
|
||||||
ansible.builtin.user:
|
ansible.builtin.user:
|
||||||
name: "{{ username }}"
|
name: "{{ username }}"
|
||||||
password: "{{ users[username]['passwords'].get('default') }}"
|
password: "{{ users[username]['passwords'].get('default') }}"
|
||||||
when: "ansible_default_ipv4.address not in users[username]['passwords'] or
|
when: "ansible_facts['default_ipv4'].address not in users[username]['passwords'] or
|
||||||
users[username]['passwords'].get(ansible_default_ipv4.address) == 'default'"
|
users[username]['passwords'].get(ansible_facts['default_ipv4'].address) == 'default'"
|
||||||
|
|
||||||
- name: "Setup ssh key for user `{{ username }}`"
|
- name: "Setup ssh key for user `{{ username }}`"
|
||||||
ansible.posix.authorized_key:
|
ansible.posix.authorized_key:
|
||||||
|
|||||||
Reference in New Issue
Block a user