Tag tasks for basic installation

This commit is contained in:
Raphael Dannecker 2025-11-04 10:44:56 +01:00
parent 3e4f113d86
commit c553454774
3 changed files with 14 additions and 0 deletions

View file

@ -5,6 +5,8 @@
key: "{{ item }}"
loop: "{{ keys2deploy }}"
when: keys2deploy is defined
tags:
- baseinstall
- name: Allow sudo without password for ansible
ansible.builtin.lineinfile:
@ -14,12 +16,16 @@
owner: root
group: root
mode: '0700'
tags:
- baseinstall
- name: Disable ansible user login
ansible.builtin.user:
name: ansible
password_lock: true
when: security_defaultuser_login_disable
tags:
- baseinstall
- name: Limit SSH access to user ansible
ansible.builtin.blockinfile: