remove globals.yaml, move vars to role defaults

This commit is contained in:
Josh Lay 2020-04-18 23:26:48 -05:00
parent fad0a40eff
commit f07a44a73c
7 changed files with 17 additions and 21 deletions

View file

@ -0,0 +1,3 @@
---
create_username: "{{ lookup('env','USER') }}"
create_pwgen: "{{ lookup('password', '/dev/null chars=ascii_letters,digits,hexdigits,punctuation length=32') }}"

View file

@ -1,9 +1,9 @@
---
- name: creating user {{ username }} in sudo group (Debian/Ubuntu)
- name: creating user {{ create_username }} in sudo group (Debian/Ubuntu)
user:
name: "{{ username }}"
password: "{{ pwgen | password_hash('sha512') }}"
name: "{{ create_username }}"
password: "{{ create_pwgen | password_hash('sha512') }}"
state: present
shell: /bin/bash
groups: sudo

View file

@ -1,9 +1,9 @@
---
- name: creating user {{ username }} in wheel group (RHEL/CentOS/Fedora)
- name: creating user {{ create_username }} in wheel group (RHEL/CentOS/Fedora)
user:
name: "{{ username }}"
password: "{{ pwgen | password_hash('sha512') }}"
name: "{{ create_username }}"
password: "{{ create_pwgen | password_hash('sha512') }}"
state: present
shell: /bin/bash
groups: wheel

View file

@ -6,13 +6,13 @@
- include_tasks: el.yml
when: ansible_distribution in ["CentOS", "Red Hat Enterprise Linux", "RedHat", "Fedora"]
- name: print generated password for {{ username }} on each host
debug: var=pwgen
- name: print generated password for {{ create_username }} on each host
debug: var=create_pwgen
when: user_created is changed
- name: copy current pubkeys to ~{{ username }}/.ssh/authorized_keys
- name: copy current pubkeys to ~{{ create_username }}/.ssh/authorized_keys
authorized_key:
user: "{{ username }}"
user: "{{ create_username }}"
state: present
key: "{{ item }}"
with_items: