X-Git-Url: https://git.phdru.name/?a=blobdiff_plain;f=playbooks%2Fdebian-init-user-phd.yml;h=b8425995b93c4316e07f1d9626882aa1056df212;hb=dabc06383bcf7288f026dabe90cec20e98b16d06;hp=32201c82deed7d5c3cc2579a3a897d3662da72c4;hpb=1117903c0c1e56e243f1dc8672e129c047e19901;p=ansible.git

diff --git a/playbooks/debian-init-user-phd.yml b/playbooks/debian-init-user-phd.yml
index 32201c8..b842599 100644
--- a/playbooks/debian-init-user-phd.yml
+++ b/playbooks/debian-init-user-phd.yml
@@ -1,13 +1,25 @@
 - name: Create user phd
   hosts: "{{ hosts | default('servers') }}"
   gather_facts: false
+  vars:
+    system_groups: root,adm,disk,cdrom,floppy,sudo,audio,www-data,video,plugdev,staff,users,Debian-exim,fuse,sambashare,input
   tasks:
+    - name: Create system groups
+      become: true
+      group:
+        name: "{{ item }}"
+        system: true
+      loop: "{{ system_groups.split(',') }}"
+    - name: Create group phd
+      become: true
+      group:
+        name: phd
     - name: Add user phd
       become: true
       user:
         name: phd
         group: phd
-        groups: root,adm,disk,cdrom,floppy,sudo,audio,www-data,video,plugdev,staff,users,Debian-exim,fuse,sambashare,input
+        groups: "{{ system_groups }}"
     - name: Create folder ~phd/.ssh
       file:
         path: ~phd/.ssh
@@ -15,18 +27,31 @@
         owner: phd
         group: phd
         mode: 0700
-     - name: Upload SSH key
-       copy:
+    - name: Upload SSH key
+      copy:
         src: ~/.ssh/phd@nb3.pub
         dest: ~phd/.ssh/phd@nb3.pub
         owner: phd
         group: phd
-        mode: 0700
+        mode: 0600
 - name: Update local user phd
   hosts: localhost
+  gather_facts: false
+  vars:
+    system_groups: root,adm,disk,cdrom,floppy,sudo,audio,www-data,video,plugdev,staff,users,Debian-exim,fuse,sambashare,bluetooth,davfs2,vboxusers,input
   tasks:
+    - name: Create system groups
+      become: true
+      group:
+        name: "{{ item }}"
+        system: true
+      loop: "{{ system_groups.split(',') }}"
+    - name: Create group phd
+      become: true
+      group:
+        name: phd
     - name: user phd
       become: true
       user:
         name: phd
-        groups: root,adm,disk,cdrom,floppy,sudo,audio,www-data,video,plugdev,staff,users,Debian-exim,fuse,sambashare,bluetooth,davfs2,vboxusers,input
+        groups: "{{ system_groups }}"