Fix(monthly-truncate-logs): Use YAML syntax instead of `=`

[ansible.git] / playbooks / debian-init-user-phd.yml

diff --git a/playbooks/debian-init-user-phd.yml b/playbooks/debian-init-user-phd.yml
index 1012d1db1f3da177607ec08fd6f1defe1be58be0..b8425995b93c4316e07f1d9626882aa1056df212 100644 (file)
--- a/playbooks/debian-init-user-phd.yml
+++ b/playbooks/debian-init-user-phd.yml
@@ -1,12 +1,25 @@
 - name: Create user phd
-  hosts: all
+  hosts: "{{ hosts | default('servers') }}"
+  gather_facts: false
+  vars:
+    system_groups: root,adm,disk,cdrom,floppy,sudo,audio,www-data,video,plugdev,staff,users,Debian-exim,fuse,sambashare,input
   tasks:
+    - name: Create system groups
+      become: true
+      group:
+        name: "{{ item }}"
+        system: true
+      loop: "{{ system_groups.split(',') }}"
+    - name: Create group phd
+      become: true
+      group:
+        name: phd
     - name: Add user phd
       become: true
       user:
         name: phd
         group: phd
-        groups: root,adm,disk,cdrom,floppy,sudo,audio,www-data,video,plugdev,staff,users,Debian-exim,fuse,sambashare,input
+        groups: "{{ system_groups }}"
     - name: Create folder ~phd/.ssh
       file:
         path: ~phd/.ssh
@@ -14,18 +27,31 @@
         owner: phd
         group: phd
         mode: 0700
-     - name: Upload SSH key
-       copy:
+    - name: Upload SSH key
+      copy:
         src: ~/.ssh/phd@nb3.pub
         dest: ~phd/.ssh/phd@nb3.pub
         owner: phd
         group: phd
-        mode: 0700
+        mode: 0600
 - name: Update local user phd
   hosts: localhost
+  gather_facts: false
+  vars:
+    system_groups: root,adm,disk,cdrom,floppy,sudo,audio,www-data,video,plugdev,staff,users,Debian-exim,fuse,sambashare,bluetooth,davfs2,vboxusers,input
   tasks:
+    - name: Create system groups
+      become: true
+      group:
+        name: "{{ item }}"
+        system: true
+      loop: "{{ system_groups.split(',') }}"
+    - name: Create group phd
+      become: true
+      group:
+        name: phd
     - name: user phd
       become: true
       user:
         name: phd
-        groups: root,adm,disk,cdrom,floppy,sudo,audio,www-data,video,plugdev,staff,users,Debian-exim,fuse,sambashare,bluetooth,davfs2,vboxusers,input
+        groups: "{{ system_groups }}"