feat: various fixes
This commit is contained in:
parent
8f396d90b6
commit
89eaee1139
27 changed files with 47 additions and 74 deletions
|
|
@ -2,7 +2,11 @@
|
|||
|
||||
# manage users
|
||||
- name: "manage users"
|
||||
tags: ["usermanagement"]
|
||||
tags: "usermanagement"
|
||||
loop: "{{ user }}"
|
||||
loop_control:
|
||||
loop_var: "__user"
|
||||
|
||||
block:
|
||||
|
||||
# manage facts
|
||||
|
|
@ -13,7 +17,7 @@
|
|||
sudo_pwless: "{{ __user['sudo_passwordless'] | default('False') }}"
|
||||
user_state: "{{ __user['state'] | default('present') }}"
|
||||
|
||||
# create users
|
||||
# create user with password
|
||||
- name: "user - create users with password - {{ __user['username'] }}"
|
||||
ansible.builtin.user:
|
||||
name: "{{ __user['username'] }}"
|
||||
|
|
@ -25,12 +29,13 @@
|
|||
- "__user['password'] is defined"
|
||||
- "user_state == 'present'"
|
||||
|
||||
- name: "user - create users withouth password - {{ __user['username'] }}"
|
||||
# create user without password
|
||||
- name: "user - create users without password - {{ __user['username'] }}"
|
||||
ansible.builtin.user:
|
||||
name: "{{ __user['username'] }}"
|
||||
comment: "{{ __user['name'] }}"
|
||||
shell: "{{ __user['shell'] | default('/bin/bash') }}"
|
||||
state: "state"
|
||||
state: "{{ user_state }}"
|
||||
when:
|
||||
- "__user['password'] is not defined"
|
||||
- "user_state == 'present'"
|
||||
|
|
@ -42,8 +47,7 @@
|
|||
key: "{{ __user['publickey'] }}"
|
||||
state: "present"
|
||||
manage_dir: "true"
|
||||
when:
|
||||
- "__user['publickey'] is defined"
|
||||
when: "__user['publickey'] is defined"
|
||||
|
||||
# delete users
|
||||
- name: "user - delete users - {{ __user['username'] }}"
|
||||
|
|
@ -61,12 +65,10 @@
|
|||
owner: "root"
|
||||
group: "root"
|
||||
mode: "0644"
|
||||
when:
|
||||
- "sudo_file"
|
||||
when: "sudo_file"
|
||||
|
||||
- name: "user - delete sudoers file - {{ __user['username'] }}"
|
||||
ansible.builtin.file:
|
||||
state: "absent"
|
||||
path: "/etc/sudoers.d/{{ __user['username'] }}"
|
||||
when:
|
||||
- "not sudo_file"
|
||||
when: "not sudo_file"
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue