diff --git a/paybooks/ansible.yaml b/paybooks/ansible.yaml new file mode 100644 index 0000000..895de4f --- /dev/null +++ b/paybooks/ansible.yaml @@ -0,0 +1,29 @@ +- name: Setup ansible node + hosts: all + tasks: + + - name: Add ansible user + ansible.builtin.user: + name: ansible + state: present + password: '!' + comment: Ansible management user + groups: sudo + become: true + + - name: Allow ansible to execute root commands + ansible.builtin.copy: + src: ansible/sudoers_ansible + dest: /etc/sudoers.d/ansible + validate: visudo -c -f %s + owner: root + group: root + mode: u=r,g=r,o=-rwx + become: true + + - name: Add epickiwi-laptop ssh key + ansible.posix.authorized_key: + comment: epickiwi@epickiwi-laptop + user: ansible + key: ssh-rsa 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 epickiwi@epickiwi-laptop + state: present \ No newline at end of file diff --git a/paybooks/ansible/sudoers_ansible b/paybooks/ansible/sudoers_ansible new file mode 100644 index 0000000..276943a --- /dev/null +++ b/paybooks/ansible/sudoers_ansible @@ -0,0 +1 @@ +ansible ALL=(ALL:ALL) NOPASSWD: ALL \ No newline at end of file