23 lines
567 B
YAML
23 lines
567 B
YAML
---
|
|
- name: S'assurer que le groupe sudo existe
|
|
ansible.builtin.group:
|
|
name: sudo
|
|
state: present
|
|
|
|
- name: S'assurer que le compte technique existe
|
|
ansible.builtin.user:
|
|
name: "{{ sudo_ansible_admin_user }}"
|
|
shell: /bin/bash
|
|
groups: sudo
|
|
append: true
|
|
create_home: true
|
|
state: present
|
|
|
|
- name: Déployer sudo NOPASSWD pour le compte technique
|
|
ansible.builtin.template:
|
|
src: 90-ansible.j2
|
|
dest: "/etc/sudoers.d/90-{{ sudo_ansible_admin_user }}"
|
|
owner: root
|
|
group: root
|
|
mode: "0440"
|
|
validate: "visudo -cf %s"
|