droid-module-user/droid.yml at master · droid-php/droid-module-user · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
description: "Create Unix user accounts and enable SSH key authentication"

variables:
    use_legacy_templating: true

tasks:

    - name: "Add a user"
      with_items: mod_droid_user_users
      sudo: true
      "user:create":
          username: "{{ item.username }}"

    - name: "Create .ssh dir"
      with_items: mod_droid_user_users
      sudo: true
      "fs:mkdir":
          directory: "{{ item.homedir }}/.ssh"
          mode: "0750"

    - name: "Set .ssh dir owner"
      with_items: mod_droid_user_users
      sudo: true
      "fs:chown":
          file: "{{ item.homedir }}/.ssh"
          user: "{{ item.username }}"
          group: "{{ item.username }}"

    - name: "Create authorized_keys file"
      with_items: mod_droid_user_users
      sudo: true
      "fs:touch":
          file: "{{ item.homedir }}/.ssh/authorized_keys"

    - name: "Set authorized_keys file mode"
      with_items: mod_droid_user_users
      sudo: true
      "fs:chmod":
          filename: "{{ item.homedir }}/.ssh/authorized_keys"
          mode: "0640"

    - name: "Set authorized_keys file owner"
      with_items: mod_droid_user_users
      sudo: true
      "fs:chown":
          file: "{{ item.homedir }}/.ssh/authorized_keys"
          user: "{{ item.username }}"
          group: "{{ item.username }}"

    - name: "Enable key auth"
      with_items: mod_droid_user_users
      sudo: true
      "user:enable-key-auth":
          homedir: "{{ item.homedir }}"
          pubkey: "{{ item.pubkey }}"