50 lines
4.1 KiB
YAML
50 lines
4.1 KiB
YAML
---
|
|
# ---------------------------
|
|
# Добавление локальных администраторов
|
|
# ---------------------------
|
|
- hosts: all
|
|
become: yes
|
|
gather_facts: false
|
|
vars:
|
|
ansible_ssh_pipelining: "true"
|
|
ansible_user: "aantropov"
|
|
ansible_ssh_transfer_method: "piped"
|
|
ansible_ssh_common_args: "-o StrictHostKeyChecking=no"
|
|
ansible_port: 22
|
|
users:
|
|
- { name: 'gem-admin', comment: 'Gem local administrator', exclusive: true, ssh_key: "ssh-rsa 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 gem-admin" }
|
|
- { name: 'lsokurov', comment: 'Leonid Sokurov', exclusive: true, ssh_key: "ssh-rsa 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 leonisa@Leonids-MacBook-Pro.local"}
|
|
- { name: 'aantropov', comment: 'Aleksandr Antropov', exclusive: true, ssh_key: "ssh-rsa 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 antropov.a.b-2023-09-25" }
|
|
# - { name: 'ffesenko', comment: 'Filipp Fesenko', exclusive: true, ssh_key: "ssh-rsa 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 f.fesenko" }
|
|
# - { name: 'mchudinov', comment: 'Maksim Chudinov', exclusive: true, ssh_key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJt7pOgOb7P6INJqnUhLj+gOJS/oH7JrZc13tfIC2lzi mchudinov" }
|
|
|
|
tasks:
|
|
- name: Add local admin
|
|
user:
|
|
comment: "{{ item.comment }}"
|
|
createhome: true
|
|
name: "{{ item.name }}"
|
|
shell: /bin/bash
|
|
password_lock: true
|
|
force: true
|
|
loop:
|
|
"{{ users }}"
|
|
no_log: true
|
|
- name: Add SSH keys
|
|
authorized_key:
|
|
user: "{{ item.name }}"
|
|
key: "{{ item.ssh_key }}"
|
|
exclusive: "{{ item.exclusive }}"
|
|
loop:
|
|
"{{ users }}"
|
|
no_log: true
|
|
|
|
- name: Sudo permissions
|
|
community.general.sudoers:
|
|
name: "{{ item.name | lower | replace('.','_') }}-access"
|
|
user: "{{ item.name }}"
|
|
commands: ALL
|
|
nopassword: true
|
|
state: present
|
|
loop:
|
|
"{{ users }}" |