176 lines
4.6 KiB
YAML
176 lines
4.6 KiB
YAML
---
|
|
|
|
## # ---
|
|
## # - Remove unwanted users
|
|
## # ---
|
|
##
|
|
## - name: (nis_user.yml) Remove (old) users from system
|
|
## user:
|
|
## name: '{{ item.name }}'
|
|
## state: absent
|
|
## with_items:
|
|
## - "{{ remove_nis_users }}"
|
|
## loop_control:
|
|
## label: '{{ item.name }}'
|
|
## tags:
|
|
## - nis-user
|
|
## - system-user
|
|
##
|
|
## - name: (nis_user.yml) Remove home directory from deleted users
|
|
## file:
|
|
## path: '{{ nis_base_home }}/{{ item.name }}'
|
|
## state: absent
|
|
## with_items:
|
|
## - "{{ remove_nis_users }}"
|
|
## loop_control:
|
|
## label: '{{ item.name }}'
|
|
## tags:
|
|
## - nis-user
|
|
## - system-user
|
|
|
|
# ---
|
|
# - default user/groups
|
|
# ---
|
|
|
|
- name: (nis_user.yml) Ensure nis groups exists
|
|
ansible.builtin.group:
|
|
name: '{{ item.name }}'
|
|
state: present
|
|
gid: '{{ item.group_id | default(omit) }}'
|
|
loop: "{{ nis_groups }}"
|
|
loop_control:
|
|
label: '{{ item.name }}'
|
|
when: item.group_id is defined
|
|
notify: Renew nis databases
|
|
tags:
|
|
- nis-user
|
|
- system-user
|
|
|
|
# - meta: end_host
|
|
|
|
- name: (nis_user.yml) Get database of nis (system) users
|
|
ansible.builtin.getent:
|
|
database: passwd
|
|
tags:
|
|
- nis-user
|
|
- system-user
|
|
|
|
- name: (nis_user.yml) Add nis (system) users if not yet exists..
|
|
ansible.builtin.command: "/root/bin/admin-stuff/add_new_user.sh {{ item.name }} '{{ item.password }}'"
|
|
changed_when: true
|
|
loop: "{{ nis_user }}"
|
|
loop_control:
|
|
label: '{{ item.name }}'
|
|
when:
|
|
- ansible_facts.getent_passwd is defined
|
|
- item.name not in ansible_facts.getent_passwd
|
|
notify: Renew nis databases
|
|
tags:
|
|
- nis-user
|
|
- system-user
|
|
|
|
- name: (nis_user.yml) Ensure nis users exists
|
|
ansible.builtin.user:
|
|
name: '{{ item.name }}'
|
|
state: present
|
|
uid: '{{ item.user_id | default(omit) }}'
|
|
# group: '{{ item.0.name | default(omit) }}'
|
|
groups: "{{ item.groups | join(', ') }}"
|
|
home: '{{ nis_base_home }}/{{ item.name }}'
|
|
shell: '{{ item.shell | d("/bin/bash") }}'
|
|
password: "{{ item.password | password_hash('sha512') }}"
|
|
update_password: on_create
|
|
append: true
|
|
loop: "{{ nis_user }}"
|
|
loop_control:
|
|
label: '{{ item.name }}'
|
|
notify: Renew nis databases
|
|
tags:
|
|
- nis-user
|
|
- system-user
|
|
|
|
|
|
- name: (nis_user.yml) Check if directory ~/.config/autostart exists
|
|
ansible.builtin.stat:
|
|
path: '{{ nis_base_home }}/{{ item.name }}/.config/autostart'
|
|
loop: "{{ nis_user }}"
|
|
loop_control:
|
|
label: '{{ item.name }}'
|
|
register: common_home_config_autostart
|
|
tags:
|
|
- nis-user
|
|
- x11vnc
|
|
|
|
|
|
- name: (nis_user.yml) Ensure directory ~/.config/autostart if not exists
|
|
ansible.builtin.file:
|
|
path: '{{ nis_base_home }}/{{ item.item.name }}/.config/autostart'
|
|
state: directory
|
|
owner: "{{ item.item.name }}"
|
|
group: "{{ item.item.name }}"
|
|
mode: "0700"
|
|
recurse: true
|
|
loop: "{{ common_home_config_autostart.results }}"
|
|
loop_control:
|
|
label: '{{ item.item.name }}'
|
|
when: not item.stat.exists|bool
|
|
tags:
|
|
- nis-user
|
|
- x11vnc
|
|
|
|
|
|
# - name: (nis_user.yml) Ensure directory ~/.config/autostart if not exists
|
|
# file:
|
|
# path: '{{ nis_base_home }}/{{ item.name }}/.config/autostart'
|
|
# state: directory
|
|
# owner: "{{ item.name }}"
|
|
# group: "{{ item.name }}"
|
|
# mode: "0700"
|
|
# recurse: true
|
|
# loop: "{{ nis_user }}"
|
|
# loop_control:
|
|
# label: '{{ item.name }}'
|
|
# tags:
|
|
# - nis-user
|
|
# - x11vnc
|
|
|
|
|
|
- name: (nis_user.yml) Check if file ~/.config/autostart/x11vnc.desktop exists
|
|
ansible.builtin.stat:
|
|
path: '{{ nis_base_home }}/{{ item.name }}/.config/autostart/x11vnc.desktop'
|
|
loop: "{{ nis_user }}"
|
|
loop_control:
|
|
label: '{{ item.name }}'
|
|
register: common_home_config_autostart_x11vnc
|
|
tags:
|
|
- nis-user
|
|
- x11vnc
|
|
|
|
- name: (nis_user.yml) Ensure file ~/.config/autostart/x11vnc.desktop exists
|
|
ansible.builtin.copy:
|
|
src: "{{ role_path + '/files/USER_HOME/.config/autostart/x11vnc.desktop' }}"
|
|
dest: '{{ nis_base_home }}/{{ item.item.name }}/.config/autostart/x11vnc.desktop'
|
|
owner: '{{ item.item.name }}'
|
|
group: '{{ item.item.name }}'
|
|
mode: "0600"
|
|
loop: "{{ common_home_config_autostart_x11vnc.results }}"
|
|
loop_control:
|
|
label: '{{ item.item.name }}'
|
|
tags:
|
|
- nis-user
|
|
- x11vnc
|
|
|
|
# - name: (nis_user.yml) Ensure file ~/.config/autostart/x11vnc.desktop exists
|
|
# copy:
|
|
# src: "{{ role_path + '/files/USER_HOME/.config/autostart/x11vnc.desktop' }}"
|
|
# dest: '{{ nis_base_home }}/{{ item.name }}/.config/autostart/x11vnc.desktop'
|
|
# owner: '{{ item.name }}'
|
|
# group: '{{ item.name }}'
|
|
# mode: "0600"
|
|
# loop: "{{ nis_user }}"
|
|
# loop_control:
|
|
# label: '{{ item.name }}'
|
|
# tags:
|
|
# - nis-user
|
|
# - x11vnc
|