feat: move to dedicated repo

tasks/user.yaml

@@ -0,0 +1,81 @@
+---
+
+# manage facts
+- name: "user - set default facts for {{ __user['username'] }}"
+  ansible.builtin.set_fact:
+    sudo_hosts: "{{ __user['hosts'] | default('all') }}"
+    sudo_file: "{{ __user['sudo'] | default('False') }}"
+    sudo_pwless: "{{ __user['sudo_passwordless'] | default('False') }}"
+    user_state: "{{ __user['state'] | default('present') }}"
+  tags:
+    - "usermanagement"
+
+# create users
+- name: "user - create users with password - {{ __user['username'] }}"
+  ansible.builtin.user:
+    name: "{{ __user['username'] }}"
+    comment: "{{ __user['name'] }}"
+    password: "{{ __user['password'] }}"
+    shell: "{{ __user['shell'] | default('/bin/bash') }}"
+    state: "present"
+  when:
+    - "__user['password'] is defined"
+    - "user_state == 'present'"
+  tags:
+    - "usermanagement"
+
+- name: "user - create users withouth password - {{ __user['username'] }}"
+  ansible.builtin.user:
+    name: "{{ __user['username'] }}"
+    comment: "{{ __user['name'] }}"
+    shell: "{{ __user['shell'] | default('/bin/bash') }}"
+    state: "state"
+  when:
+    - "__user['password'] is not defined"
+    - "user_state == 'present'"
+  tags:
+    - "usermanagement"
+
+# manage authorized_keys
+- name: "user - manage authorized_keys - {{ __user['username'] }}"
+  ansible.posix.authorized_key:
+    user: "{{ __user['username'] }}"
+    key: "{{ __user['publickey'] }}"
+    state: "present"
+    manage_dir: "true"
+  when:
+    - "__user['publickey'] is defined"
+  tags:
+    - "usermanagement"
+
+# delete users
+- name: "user - delete users - {{ __user['username'] }}"
+  ansible.builtin.user:
+    name: "{{ __user['username'] }}"
+    state: "absent"
+    remove: "yes"
+  when: "user_state == 'absent'"
+  tags:
+    - "usermanagement"
+
+# manage sudoers file
+- name: "user - create sudoers file - {{ __user['username'] }}"
+  ansible.builtin.template:
+    src: "templates/usermanagement/sudoers.d/sudoers.j2"
+    dest: "/etc/sudoers.d/{{ __user['username'] }}"
+    owner: "root"
+    group: "root"
+    mode: "0644"
+  when:
+    - "sudo_file"
+  tags:
+    - "usermanagement"
+
+- name: "user - delete sudoers file - {{ __user['username'] }}"
+  ansible.builtin.file:
+    state: "absent"
+    path: "/etc/sudoers.d/{{ __user['username'] }}"
+  when:
+    - "not sudo_file"
+  tags:
+    - "usermanagement"