christianlempa-boilerplates/ansible/configuration/ssh/config-add-sshkey.yaml

---
- name: add ssh key
  hosts: "{{ my_hosts | d([]) }}"
  become: true
  tasks:
    - name: install public keys
      ansible.posix.authorized_key:
        user: "{{ lookup('env','USER') }}"
        state: present
        key: "{{ lookup('file', '~/.ssh/id_rsa.pub') }}"
    - name: change sudoers file
      ansible.builtin.lineinfile:
        path: /etc/sudoers
        state: present
        regexp: '^%sudo'
        line: '%sudo ALL=(ALL) NOPASSWD: ALL'
        validate: /usr/sbin/visudo -cf %s
initial deployment 2021-06-11 15:01:45 +02:00			`---`
ansiblesemaphore-udpate 2023-05-25 13:48:38 +02:00			`- name: add ssh key`
fix: ensure the `hosts` definition is always defined Ensure that the `hosts` definition is always defined, defaulting to an empty set. Due to the lack of an Ansible inventory file this is most likely meant to be set as an Ansible extra variable [1]. We also rename the variable named `hosts` to `my_hosts` because `hosts` is a reserved name in Ansible. Reserved names in Ansible are for example all class variable names of plays, roles, blocks, and tasks [2], and `hosts` for example is used by plays [3]. [1] https://docs.ansible.com/ansible/latest/playbook_guide/playbooks_variables.html#defining-variables-at-runtime [2] https://github.com/ansible/ansible/blob/v2.16.4/lib/ansible/vars/reserved.py#L39 [3] https://github.com/ansible/ansible/blob/v2.16.4/lib/ansible/playbook/play.py#L58 2024-02-23 12:19:48 +01:00			`hosts: "{{ my_hosts \| d([]) }}"`
fix: consistently use `true`/`false` as truthy values 2024-03-03 16:16:22 +01:00			`become: true`
initial deployment 2021-06-11 15:01:45 +02:00			`tasks:`
fix: fix YAML indentation issues 2024-03-03 16:10:27 +01:00			`- name: install public keys`
			`ansible.posix.authorized_key:`
			`user: "{{ lookup('env','USER') }}"`
			`state: present`
			`key: "{{ lookup('file', '~/.ssh/id_rsa.pub') }}"`
			`- name: change sudoers file`
			`ansible.builtin.lineinfile:`
			`path: /etc/sudoers`
			`state: present`
			`regexp: '^%sudo'`
			`line: '%sudo ALL=(ALL) NOPASSWD: ALL'`
			`validate: /usr/sbin/visudo -cf %s`