Refactor Ansible tasks and templates for improved consistency and clarity

This commit is contained in:
2026-07-31 02:24:42 +02:00
parent 81ef678904
commit 46327da2ac
52 changed files with 1679 additions and 1461 deletions
+10 -10
View File
@@ -1,6 +1,6 @@
---
#- name: (sudoers-server.yml) include variables
# - name: (sudoers-server.yml) include variables
# include_vars: "{{ item }}"
# with_first_found:
# - "sudoers-{{ inventory_hostname }}.yml"
@@ -11,15 +11,15 @@
# - sudoers-remove
# - sudoers-file-configuration
# - sudoers-global-configuration
- name: (sudoers-server.yml) Remove user entries in file /etc/sudoers
lineinfile:
ansible.builtin.lineinfile:
dest: /etc/sudoers
state: absent
regexp: '^{{ item }}'
owner: root
group: root
mode: 0440
mode: "0440"
validate: visudo -cf %s
with_items: '{{ sudoers_server_remove_user }}'
tags:
@@ -29,10 +29,10 @@
ansible.builtin.template:
src: etc/sudoers.d/50-user.server.j2
dest: /etc/sudoers.d/50-user
#validate: visudo -cf %s
# validate: visudo -cf %s
owner: root
group: root
mode: 0440
mode: "0440"
tags:
- sudoers-file-configuration
@@ -42,16 +42,16 @@
dest: /etc/sudoers
owner: root
group: root
mode: 0440
#validate: visudo -cf %s
mode: "0440"
# validate: visudo -cf %s
tags:
- sudoers-global-configuration
- name: (sudoers-server.yml) Ensure all sudo_users are in sudo group
user:
ansible.builtin.user:
name: "{{ item }}"
groups: sudo
append: yes
append: true
with_items: "{{ sudo_server_users }}"
tags:
- sudo-users