aboutsummaryrefslogtreecommitdiff
path: root/playbook.yml
blob: ada182f4dc6f66e8ff8d99b3f7c98ca46fddaefb (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
---
- hosts: all
  sudo: yes
  tasks:
    - name: Create user without password
      user: name={{ username }}
      when: password is not defined

    - name: Hash password if extant
      local_action: command mkpasswd --method=SHA-512 {{ password }}
      register: crypted_password
      when: password is defined

    - name: Create user with password
      user: name={{ username }}
            password={{ crypted_password.stdout }}
      when: crypted_password is defined

    - name: Upload user key
      authorized_key: user={{ username }}
                      key={{ lookup('file', item) }}
      with_fileglob:
        - keys/{{ username }}.pub

    - name: Upload global keys
      authorized_key: user={{ username }}
                      key={{ lookup('file', item) }}
      with_fileglob:
        - keys/global/*.pub