ansible-machine-setup/roles/user-account/tasks/main.yaml

62 lines
1.5 KiB
YAML

---
- name: setup user account
user:
name: "{{ username }}"
password: "{{ password }}"
create_home: yes
state: present
update_password: always
register: account
- name: ensure .ssh exists
become_user: "{{ account.name }}"
file:
path: "/home/{{ account.name }}/.ssh"
state: directory
mode: "0700"
- name: copy ssh key
become_user: "{{ account.name }}"
copy:
src: "ssh/"
dest: "/home/{{ account.name }}/.ssh/"
mode: "0600"
- name: ensure .gnupg exists
become_user: "{{ account.name }}"
file:
path: "/home/{{ account.name }}/.gnupg"
state: directory
mode: "0700"
- name: copy gpg keys
become_user: "{{ account.name }}"
copy:
src: "gnupg/"
dest: "/home/{{ account.name }}/.gnupg/"
mode: "0600"
- name: set gpg-agent pinentry-program
become_user: "{{ account.name }}"
lineinfile:
path: "/home/{{ account.name }}/.gnupg/gpg-agent.conf"
regexp: "^pinentry-program "
line: "pinentry-program /usr/bin/pinentry-gtk-2"
mode: 0644
create: yes
- name: set gpg-agent max-cache-ttl
become_user: "{{ account.name }}"
lineinfile:
path: "/home/{{ account.name }}/.gnupg/gpg-agent.conf"
regexp: "^max-cache-ttl "
line: "max-cache-ttl 60480000"
- name: set gpg-agent default-cache-ttl
become_user: "{{ account.name }}"
lineinfile:
path: "/home/{{ account.name }}/.gnupg/gpg-agent.conf"
regexp: "^default-cache-ttl "
line: "default-cache-ttl 60480000"