created new playbook for nonroot user login, moved package installation stage/order prior to user/group management
This commit is contained in:
@@ -5,8 +5,8 @@
|
||||
vars:
|
||||
harden: true
|
||||
local_facts:
|
||||
user_dir: ~
|
||||
user_id: ~
|
||||
user_id: ~ # REQUIRED
|
||||
user_dir: ~ # REQUIRED
|
||||
tasks:
|
||||
- name: Hardening SSH server
|
||||
ansible.builtin.include_role:
|
||||
@@ -17,12 +17,15 @@
|
||||
# defaults_from: main # not required. File to load from a role's C(defaults/) directory.
|
||||
# allow_duplicates: True # not required. Overrides the role's metadata setting to allow using a role more than once with the same parameters.
|
||||
# handlers_from: main # not required. File to load from a role's C(handlers/) directory.
|
||||
- name: Installing requisite packages
|
||||
ansible.builtin.include_role:
|
||||
name: init-server
|
||||
tasks_from: core@install-pkgs
|
||||
handlers_from: core
|
||||
# - name: Reboot machine for shell environment change
|
||||
# ansible.builtin.reboot:
|
||||
# msg: Rebooting machine
|
||||
- name: Initializing groups and users
|
||||
ansible.builtin.include_role:
|
||||
name: init-server # required. The name of the role to be executed.
|
||||
# apply: # not required. Accepts a hash of task keywords (e.g. C(tags), C(become)) that will be applied to all tasks within the included role.
|
||||
tasks_from: ssh-users # not required. File to load from a role's C(tasks/) directory.
|
||||
vars_from: main # not required. File to load from a role's C(vars/) directory.
|
||||
defaults_from: main # not required. File to load from a role's C(defaults/) directory.
|
||||
# allow_duplicates: True # not required. Overrides the role's metadata setting to allow using a role more than once with the same parameters.
|
||||
# handlers_from: main # not required. File to load from a role's C(handlers/) directory.
|
||||
name: init-server
|
||||
tasks_from: ssh-users
|
||||
Reference in New Issue
Block a user