29 lines
847 B
YAML
29 lines
847 B
YAML
|
---
|
||
|
|
- name: Exiger la clé publique de sauvegarde
|
||
|
|
ansible.builtin.assert:
|
||
|
|
that:
|
||
|
|
- serveur_backup_pubkey | length > 0
|
||
|
|
fail_msg: "serveur_backup_pubkey requis (clé publique de la paire de sauvegarde)."
|
||
|
|
|
||
|
|
- name: Créer l'utilisateur de sauvegarde
|
||
|
|
ansible.builtin.user:
|
||
|
|
name: "{{ serveur_backup_utilisateur }}"
|
||
|
|
home: "{{ serveur_backup_racine }}"
|
||
|
|
shell: /bin/bash
|
||
|
|
create_home: true
|
||
|
|
system: true
|
||
|
|
|
||
|
|
- name: Sécuriser la racine des dépôts
|
||
|
|
ansible.builtin.file:
|
||
|
|
path: "{{ serveur_backup_racine }}"
|
||
|
|
state: directory
|
||
|
|
owner: "{{ serveur_backup_utilisateur }}"
|
||
|
|
group: "{{ serveur_backup_utilisateur }}"
|
||
|
|
mode: "0700"
|
||
|
|
|
||
|
|
- name: Autoriser la clé SSH de sauvegarde
|
||
|
|
ansible.posix.authorized_key:
|
||
|
|
user: "{{ serveur_backup_utilisateur }}"
|
||
|
|
key: "{{ serveur_backup_pubkey }}"
|
||
|
|
state: present
|