From 0f9a79c433f26ef12c8e22a97c41d755ce3b8590 Mon Sep 17 00:00:00 2001
From: Trygve Laugstøl <trygvis@inamo.no>
Date: Tue, 10 Apr 2018 09:04:50 +0200
Subject: o Adding numquam and superusers role.

---
 ansible/roles/superusers/tasks/main.yml | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)
 create mode 100644 ansible/roles/superusers/tasks/main.yml

(limited to 'ansible/roles/superusers')

diff --git a/ansible/roles/superusers/tasks/main.yml b/ansible/roles/superusers/tasks/main.yml
new file mode 100644
index 0000000..3a1e974
--- /dev/null
+++ b/ansible/roles/superusers/tasks/main.yml
@@ -0,0 +1,30 @@
+---
+- name: superuser accounts
+  tags: superusers
+  become: yes
+  user:
+    name: "{{ item.username }}"
+    groups: sudo,systemd-journal
+    shell: /bin/bash
+    append: yes
+  with_items:
+    - "{{ superusers }}"
+
+- name: superuser authorized_keys
+  tags: superusers
+  become: yes
+  authorized_key:
+    user: "{{ item.username }}"
+    state: "{{ item.state }}"
+    key: "{{ users[item.username].authorized_keys }}"
+  with_items:
+    - "{{ superusers }}"
+
+- name: Allow 'sudo' group to have passwordless sudo
+  tags: superusers
+  become: yes
+  lineinfile:
+    dest: /etc/sudoers
+    state: present
+    regexp: '^%sudo'
+    line: '%sudo ALL=(ALL) NOPASSWD: ALL'
-- 
cgit v1.2.3