From 0f9a79c433f26ef12c8e22a97c41d755ce3b8590 Mon Sep 17 00:00:00 2001 From: Trygve Laugstøl Date: Tue, 10 Apr 2018 09:04:50 +0200 Subject: o Adding numquam and superusers role. --- ansible/roles/superusers/tasks/main.yml | 30 ++++++++++++++++++++++++++++++ ansible/roles/timezone/tasks/main.yml | 3 ++- 2 files changed, 32 insertions(+), 1 deletion(-) create mode 100644 ansible/roles/superusers/tasks/main.yml (limited to 'ansible/roles') diff --git a/ansible/roles/superusers/tasks/main.yml b/ansible/roles/superusers/tasks/main.yml new file mode 100644 index 0000000..3a1e974 --- /dev/null +++ b/ansible/roles/superusers/tasks/main.yml @@ -0,0 +1,30 @@ +--- +- name: superuser accounts + tags: superusers + become: yes + user: + name: "{{ item.username }}" + groups: sudo,systemd-journal + shell: /bin/bash + append: yes + with_items: + - "{{ superusers }}" + +- name: superuser authorized_keys + tags: superusers + become: yes + authorized_key: + user: "{{ item.username }}" + state: "{{ item.state }}" + key: "{{ users[item.username].authorized_keys }}" + with_items: + - "{{ superusers }}" + +- name: Allow 'sudo' group to have passwordless sudo + tags: superusers + become: yes + lineinfile: + dest: /etc/sudoers + state: present + regexp: '^%sudo' + line: '%sudo ALL=(ALL) NOPASSWD: ALL' diff --git a/ansible/roles/timezone/tasks/main.yml b/ansible/roles/timezone/tasks/main.yml index e60de32..0a7744a 100644 --- a/ansible/roles/timezone/tasks/main.yml +++ b/ansible/roles/timezone/tasks/main.yml @@ -2,7 +2,8 @@ - tags: - timezone block: - - file: + - become: yes + file: src: /usr/share/zoneinfo/Europe/Oslo dest: /etc/localtime state: link -- cgit v1.2.3