From ad50e8774d7727c8a0be3f6c9230e5e33cb42089 2023-08-04 16:37:00
From: x <xbr@c3l.lu>
Date: 2023-08-04 16:37:00
Subject: [PATCH] fix: users should not have primary group `sudo`

---

diff --git a/initial_server_setup/initial_setup.yml b/initial_server_setup/initial_setup.yml
index c1e6ff2fd9b7ad9e5621901983541943b7bb2f95..33e006e3a23f2b62ed8bb07cc797224b186f5fdf 100644
--- a/initial_server_setup/initial_setup.yml
+++ b/initial_server_setup/initial_setup.yml
@@ -57,6 +57,7 @@
         password: "{{ password | password_hash('sha512') }}"
         groups:
           - sudo
+        append: true
         state: present
       tags: users
 
@@ -64,8 +65,9 @@
       ansible.builtin.user:
         name: orimpe
         password: "{{ password | password_hash('sha512') }}"
-        groups: # Empty by default, here we give it some groups
+        groups:
           - sudo
+        append: true
         state: present
       tags: users
 
@@ -73,8 +75,9 @@
       ansible.builtin.user:
         name: metalgamer
         password: "{{ password | password_hash('sha512') }}"
-        groups: # Empty by default, here we give it some groups
+        groups:
           - sudo
+        append: true
         state: present
       tags: users
 
@@ -82,8 +85,9 @@
       ansible.builtin.user:
         name: xbr
         password: "{{ password | password_hash('sha512') }}"
-        groups: # Empty by default, here we give it some groups
+        groups:
           - sudo
+        append: true
         state: present
       tags: users