diff --git a/tasks/main.yml b/tasks/main.yml index 2602944..26ad724 100644 --- a/tasks/main.yml +++ b/tasks/main.yml @@ -1,3 +1,4 @@ +--- - name: create ssh_access group group: name: ssh_access @@ -5,11 +6,11 @@ - name: Create user user: - name: "{{item}}" + name: "{{ item }}" shell: /bin/bash groups: "{{ group }},ssh_access" password: "{{lookup('password', 'cred.' + item + '.pass chars=ascii_letters,digits,hexdigitsi length=15') | password_hash('sha512')}}" - loop: "{{userlist}}" + loop: "{{ userlist }}" - name: Add user to sudoers lineinfile: @@ -18,16 +19,15 @@ line: "{{ item }} ALL=(ALL) NOPASSWD: ALL" mode: 0440 when: sudoers - loop: "{{userlist}}" + loop: "{{ userlist }}" - name: Display generated password debug: - msg: "Generated password for {{item}}: {{lookup('password', 'cred.' + item + '.pass chars=ascii_letters,digits,hexdigitsi length=15')}}" - loop: "{{userlist}}" + msg: "Generated password for {{ item }}: {{lookup('password', 'cred.' + item + '.pass chars=ascii_letters,digits,hexdigitsi length=15')}}" + loop: "{{ userlist }}" - name: Remove password files created by ansible file: path: cred.{{item}}.pass state: absent - loop: "{{userlist}}" - + loop: "{{ userlist }}"