Allow default-user login

inventory-sample.yml

@@ -2,5 +2,9 @@
 all:
   vars:
     domain: "{{ ansible_domain }}"
+    security_defaultuser_login_disable: false
+    kde_desktop_pkg:
+      - akonadi-backend-sqlite
+
   hosts:
     localhost:

roles/lmn_security/defaults/main.yml

@@ -0,0 +1,2 @@
+---
+security_defaultuser_login_disable: true

roles/lmn_security/tasks/main.yml

@@ -18,6 +18,7 @@
   ansible.builtin.user:
     name: ansible
     password_lock: true
+  when: security_defaultuser_login_disable
 
 - name: Limit SSH access to user ansible
   ansible.builtin.blockinfile: