30 lines
703 B
YAML
30 lines
703 B
YAML
---
|
|
- name: Deploy SSH keys
|
|
ansible.posix.authorized_key:
|
|
user: ansible
|
|
key: "{{ item }}"
|
|
loop: "{{ keys2deploy }}"
|
|
|
|
- name: Allow sudo without password for ansible
|
|
ansible.builtin.lineinfile:
|
|
path: /etc/sudoers.d/95-lmn-ansible
|
|
line: 'ansible ALL=(root) NOPASSWD: ALL'
|
|
create: true
|
|
owner: root
|
|
group: root
|
|
mode: '0700'
|
|
|
|
- name: Disable ansible user login
|
|
ansible.builtin.user:
|
|
name: ansible
|
|
password_lock: true
|
|
|
|
- name: Limit SSH access to user ansible
|
|
ansible.builtin.blockinfile:
|
|
dest: /etc/ssh/sshd_config.d/local.conf
|
|
create: true
|
|
mode: '0644'
|
|
block: |
|
|
PasswordAuthentication no
|
|
AllowUsers ansible
|
|
notify: Reload sshd
|