dumpyard/create_user.yml at master · hellodk/dumpyard · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
---
- hosts: 192.168.122.196
  sudo: yes
  remote_user: dk
  tasks:

    - name: "Create hell_cat group"
      group: >
        name="hell_cat"
        state="present"

    - name: "Create hell_cat user - 'hell_cat_user'"
      user: >
        name="hell_cat"
        group="hell_cat"
        home="/home/hell_cat"
        createhome=yes
        move_home=yes
        comment="hell_cat user"
        shell="/bin/bash"
        state="present"

    - name: "Create directory /etc/sudoers.d"
      file: >
        path="/etc/sudoers.d"
        state="directory"
        owner="root"
        group="root"
        mode=0755

    - name: "Include /etc/sudoers.d in sudoers file"
      lineinfile: >
        dest="/etc/sudoers"
        line="#includedir /etc/sudoers.d"
        state="present"
        validate='/usr/sbin/visudo -cf %s'

    - name: "Remove requiretty in /etc/sudoers"
      lineinfile: >
        dest="/etc/sudoers"
        regexp="^\s*Defaults\s*requiretty"
        state="absent"
        validate='/usr/sbin/visudo -cf %s'

    - name: "Grant sudo permission (full access)"
      template: >
        src="sudoers_file.j2"
        dest="/etc/sudoers.d/hell_cat_user"
        owner="root"
        group="root"
        mode="0400"

    - name: "Ensure home directory ownership is correct"
      file: >
        path="/home/hell_cat/"
        owner="hell_cat"
        group="hell_cat"
        state="directory"

    - name: "Create .ssh directory"
      file: >
        path="/home/hell_cat/.ssh"
        owner="hell_cat"
        group="hell_cat"
        mode="0700"
        state="directory"

    - name: "Setup key based ssh login"
      copy: >
        src="authorized_keys"
        dest="/home/hell_cat/.ssh/authorized_keys"
        owner="hell_cat"
        group="hell_cat"
        mode="0600"

    - name: "Setup hell_cat public key"
      copy: >
        src="id_rsa.pub"
        dest="/home/hell_cat/.ssh/id_rsa.pub"
        owner="hell_cat"
        group="hell_cat"
        mode="0600"

    - name: "Setup hell_cat private key"
      copy: >
        src="id_rsa"
        dest="/home/hell_cat/.ssh/id_rsa"
        owner="hell_cat"
        group="hell_cat"
        mode="0600"

    - name: "Setup hell_cat ssh config"
      copy: >
        src="config"
        dest="/home/hell_cat/.ssh/config"
        owner="hell_cat"
        group="hell_cat"
        mode="0600"