christianlempa-boilerplates/ansible/configuration/ssh/config-add-sshkey.yaml

---
- name: add ssh key
  hosts: "{{ my_hosts | d([]) }}"
  become: yes
  tasks:
  - name: install public keys
    ansible.posix.authorized_key:
      user: "{{ lookup('env','USER') }}"
      state: present
      key: "{{ lookup('file', '~/.ssh/id_rsa.pub') }}"
  - name: change sudoers file
    ansible.builtin.lineinfile:
      path: /etc/sudoers
      state: present
      regexp: '^%sudo'
      line: '%sudo ALL=(ALL) NOPASSWD: ALL'
      validate: /usr/sbin/visudo -cf %s
initial deployment 2021-06-11 15:01:45 +02:00			`---`
ansiblesemaphore-udpate 2023-05-25 13:48:38 +02:00			`- name: add ssh key`
fix: ensure the `hosts` definition is always defined Ensure that the `hosts` definition is always defined, defaulting to an empty set. Due to the lack of an Ansible inventory file this is most likely meant to be set as an Ansible extra variable [1]. We also rename the variable named `hosts` to `my_hosts` because `hosts` is a reserved name in Ansible. Reserved names in Ansible are for example all class variable names of plays, roles, blocks, and tasks [2], and `hosts` for example is used by plays [3]. [1] https://docs.ansible.com/ansible/latest/playbook_guide/playbooks_variables.html#defining-variables-at-runtime [2] https://github.com/ansible/ansible/blob/v2.16.4/lib/ansible/vars/reserved.py#L39 [3] https://github.com/ansible/ansible/blob/v2.16.4/lib/ansible/playbook/play.py#L58 2024-02-23 12:19:48 +01:00			`hosts: "{{ my_hosts \| d([]) }}"`
initial deployment 2021-06-11 15:01:45 +02:00			`become: yes`
			`tasks:`
			`- name: install public keys`
			`ansible.posix.authorized_key:`
			`user: "{{ lookup('env','USER') }}"`
			`state: present`
monitoring 2021-09-17 14:12:39 +02:00			`key: "{{ lookup('file', '~/.ssh/id_rsa.pub') }}"`
initial deployment 2021-06-11 15:01:45 +02:00			`- name: change sudoers file`
chore: consistently use Ansible FQCN in module calls In order to adhere to Ansible best practices, always use Fully Qualified Collection Names (FQCN) [1] when calling modules. Other than that, this commit doesn't apply any further changes except where needed as a module name has been updated. The module `ansible.builtin.systemd` has been renamed to `ansible.builtin.systemd_service` with `ansible.builtin.systemd` just being an alias [2] for reasons of backward compatibility. [1] https://docs.ansible.com/ansible/latest/tips_tricks/ansible_tips_tricks.html#use-fully-qualified-collection-names [2] https://docs.ansible.com/ansible/latest/collections/ansible/builtin/systemd_service_module.html#synopsis 2024-02-24 11:56:25 +01:00			`ansible.builtin.lineinfile:`
initial deployment 2021-06-11 15:01:45 +02:00			`path: /etc/sudoers`
			`state: present`
			`regexp: '^%sudo'`
			`line: '%sudo ALL=(ALL) NOPASSWD: ALL'`
fix: add final newline character to text files This makes text files compliant to POSIX which requires every line of a text file to end with a newline character [1][2]. [1] https://pubs.opengroup.org/onlinepubs/9699919799/basedefs/V1_chap03.html#tag_03_403 [2] https://pubs.opengroup.org/onlinepubs/9699919799/basedefs/V1_chap03.html#tag_03_206 2024-02-22 19:01:59 +01:00			`validate: /usr/sbin/visudo -cf %s`