infra/ansible-role-accounts
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add support for ssh keys

Browse source
This commit is contained in:
nd 2020-09-25 18:23:57 +02:00
parent 5130e07acc
commit fbb20fdf1d
No known key found for this signature in database
GPG key ID: 21B5CD4DEE3670E9
3 changed files with 19 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

14
tasks/users.yml
View file

@ -3,17 +3,18 @@
genssh: false
group: ~
groups: []
home: "{{ ('/var/lib/'+item.key) if (item.value.system|d(True)) else ('/home/'+item.key) }}"
home: "{{ ('/var/lib/'+currentuser.key) if (currentuser.value.system|d(True)) else ('/home/'+currentuser.key) }}"
system: true
state: present
uid: "{{ omit }}"
password: "*"
shell: "/usr/sbin/nologin"
authorized_keys: {}
- set_fact:
user: "{{ defaultuser|combine(item.value|d({}), {'name': item.key} ) }}"
user: "{{ defaultuser|combine(currentuser.value|d({}), {'name': currentuser.key} ) }}"
- name: create users
- name: "create user ({{ user.name }})"
user:
name: "{{ user.name }}"
generate_ssh_key: "{{ user.genssh }}"
@ -26,3 +27,10 @@
uid: "{{ user.uid|d(omit) }}"
password: "{{ user.password }}"
shell: "{{ user.shell }}"
- name: "setup ssh key(s) ({{ user.name }})"
loop: "{{ user.authorized_keys|dict2items }}"
authorized_key:
user: "{{ user.name }}"
key: "{{ item.value }}"
comment: "{{ item.key }}"