Mykhailo Nikiforov
591715a89f
All checks were successful
checks-test / Lint (pull_request) Successful in 24s
checks-test / molecule (debian11) (pull_request) Successful in 2m12s
checks-test / molecule (debian12) (pull_request) Successful in 2m30s
checks-test / molecule (debian13) (pull_request) Successful in 2m22s
checks-test / molecule (rockylinux10) (pull_request) Successful in 2m6s
checks-test / molecule (rockylinux9) (pull_request) Successful in 2m10s
checks-test / molecule (ubuntu2404) (pull_request) Successful in 1m56s
checks-test / molecule (ubuntu2204) (pull_request) Successful in 2m12s
31 lines
1.4 KiB
YAML
31 lines
1.4 KiB
YAML
---
|
|
- name: "Create user `{{ username }}`"
|
|
ansible.builtin.user:
|
|
name: "{{ username }}"
|
|
append: true
|
|
groups: "{{ users[username].get('groups', '') }}"
|
|
shell: "{{ users[username].get('shell', '/bin/bash') }}"
|
|
uid: "{{ users[username].get('uid') if 'uid' in users[username] else omit }}"
|
|
|
|
- name: "Set specific password for user `{{ username }}`"
|
|
ansible.builtin.user:
|
|
name: "{{ username }}"
|
|
password: "{{ users[username]['passwords'].get(ansible_default_ipv4.address) }}"
|
|
when: "ansible_facts['default_ipv4'].address in users[username]['passwords'] and
|
|
users[username]['passwords'].get(ansible_facts['default_ipv4'].address) != 'default'"
|
|
|
|
- name: "Set default password for user `{{ username }}`"
|
|
ansible.builtin.user:
|
|
name: "{{ username }}"
|
|
password: "{{ users[username]['passwords'].get('default') }}"
|
|
when: "ansible_facts['default_ipv4'].address not in users[username]['passwords'] or
|
|
users[username]['passwords'].get(ansible_facts['default_ipv4'].address) == 'default'"
|
|
|
|
- name: "Setup ssh key for user `{{ username }}`"
|
|
ansible.posix.authorized_key:
|
|
user: "{{ username }}"
|
|
state: "{{ users[username]['authorized_keys'][item].get('state', 'present') }}"
|
|
key: "{{ users[username]['authorized_keys'][item].get('key') }}"
|
|
with_items: "{{ users[username]['authorized_keys'].keys() }}"
|
|
when: '"authorized_keys" in users[username]'
|