freifunk/Ansible-Configuration Changeset - 5c17d88f3e11 · Chaos Computer Club Lëtzebuerg Projects

Changeset - 5c17d88f3e11

Parent rev.

Child rev.

[Not reviewed]

0 1 0

x - 22 months ago 2023-08-31 18:08:17
xbr@c3l.lu

fix: initial_setup, proper passwordless sudo, incl users

1 file changed with 8 insertions and 5 deletions:

initial_server_setup/initial_setup.yml

0 comments (0 inline, 0 general)

initial_server_setup/initial_setup.yml

➞

Show inline comments

@@ @@ -137,25 +137,28 @@ @@
       tags: users
     - name: Add SSH key for users from vars
       ansible.posix.authorized_key:
         user: "{{ item.username }}"
         state: present
         key: "{{ lookup('file', item.key_path) }}"
       tags: users
       loop: "{{ users_member | union(users_system) }}"
     - name: Allow for password-less sudo
       community.general.sudoers:
         name: passwordless-sudo
         group: sudo
         commands: ALL
         nopassword: true
       # Not done via community.general.sudoders because it does not support
       # sudo-ing into users without a passsword.
       ansible.builtin.copy:
         dest: /etc/sudoers.d/passwordless-sudo
         content: '%sudo   ALL=(ALL:ALL) NOPASSWD: ALL'
         owner: root
         group: root
         mode: '0440'
       tags: users
     - name: Reload SSHD
       ansible.builtin.service:
         name: "sshd"
         state: "reloaded"
       tags: network,ssh
       when: pass_auth.changed or pass_auth_sshd.changed or empty_pass.changed or empty_pass_sshd.changed or root_login.changed or root_login_sshd.changed

0 comments (0 inline, 0 general)