Ansible Role: users

Add users, create custom configurations.

Requirements

Supported operating systems: see https://github.com/andyceo/ansible-role-users/blob/master/meta/main.yml#L10

Variables

This role contain one variable users. This is the dictionary of form:

users:
  users:
    username:

      # Generate or not SSH key (Default: no)
      generate_ssh_key: yes

      # Add user to sudoers with specfic data (Default: empty string)
      #
      # Add 'ALL=(ALL) NOPASSWD: ALL' for user to be able
      # execute any command without password prompt
      #
      # Add 'ALL=NOPASSWD: /usr/bin/rsync' for user to be able
      # execute rsync command without password prompt
      sudoers:
        - "ALL=(ALL) NOPASSWD: ALL"

    # Set given authorized keys to username's ~/.ssh/autorized_keys
    authorized_keys:
      - key: ssh_public_key
        state: ignore  # default present
        comment: override_key_comment  # not required

      # Create home directory (Default: yes)
      createhome: yes

      # User shell (Default: /bin/bash)
      shell: /bin/bash

      # State of user (add or remove) (Default: present). You can use 'ignored' status to skip this user
      state: present

      # Password (in crypted form). To crypt password "guest123" for username "guest", use:
      # python -c 'import crypt; print crypt.crypt("guest123", "guest")'
      # the above code will produce gu2KmqcJp0Yyo
      password: gu2KmqcJp0Yyo

      # Should password be updated on every ansible run (Default: always)
      update_password: always

      # List of groups user should belongs to (sudo group for administration) (Default: empty string, that mean no groups at all)
      groups: sudo

  ssh:
    fetch_key: no
    deploy_key_user: no
    known_hosts_path: no

Tags

• users-ssh-config: generate user ssh config for current user and host in user home directory (you should manually move it to ~/.ssh/config and edit as you wish)
• - users-authorized-keys: set given SSH authorized keys to users