Explicit permissions
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
This commit is contained in:
@ -3,27 +3,41 @@
|
||||
- name: Create ssh directory
|
||||
file:
|
||||
path: '.ssh'
|
||||
owner: '{{ user.name }}'
|
||||
group: '{{ user.name }}'
|
||||
mode: 0700
|
||||
state: directory
|
||||
become_user: '{{ user.name }}'
|
||||
|
||||
- name: Create ssh configuration file directory
|
||||
file:
|
||||
path: '.ssh/config.d'
|
||||
owner: '{{ user.name }}'
|
||||
group: '{{ user.name }}'
|
||||
mode: 0755
|
||||
state: directory
|
||||
become_user: '{{ user.name }}'
|
||||
|
||||
- name: Deploying config files
|
||||
template:
|
||||
src: 'config.d/{{ item }}.j2'
|
||||
dest: '.ssh/config.d/{{ item }}'
|
||||
owner: '{{ user.name }}'
|
||||
group: '{{ user.name }}'
|
||||
mode: 0644
|
||||
loop:
|
||||
- aurore
|
||||
- crans
|
||||
- dptinfo
|
||||
- perso
|
||||
- virtu
|
||||
become_user: '{{ user.name }}'
|
||||
|
||||
- name: Include config files
|
||||
template:
|
||||
src: 'config.j2'
|
||||
dest: '.ssh/config'
|
||||
owner: '{{ user.name }}'
|
||||
group: '{{ user.name }}'
|
||||
mode: 0644
|
||||
become_user: '{{ user.name }}'
|
||||
|
Reference in New Issue
Block a user