Feat: Split `debian-init-user-phd` into roles

[ansible.git] / playbooks / roles / debian-phd / tasks / main.yml

diff --git a/playbooks/roles/debian-phd/tasks/main.yml b/playbooks/roles/debian-phd/tasks/main.yml
new file mode 100644 (file)
index 0000000..cea3f9f
--- /dev/null
+++ b/playbooks/roles/debian-phd/tasks/main.yml
@@ -0,0 +1,30 @@
+- name: Create system groups
+  become: true
+  group:
+    name: "{{ item }}"
+    system: true
+  loop: "{{ system_groups.split(',') }}"
+- name: Create group phd
+  become: true
+  group:
+    name: phd
+- name: Add user phd
+  become: true
+  user:
+    name: phd
+    group: phd
+    groups: "{{ system_groups }}"
+- name: Create folder ~phd/.ssh
+  file:
+    path: ~phd/.ssh
+    state: directory
+    owner: phd
+    group: phd
+    mode: 0700
+- name: Upload SSH key
+  copy:
+    src: ~/.ssh/phd@nb3.pub
+    dest: ~phd/.ssh/authorized_keys
+    owner: phd
+    group: phd
+    mode: 0600