1 files changed, 35 insertions, 0 deletions
diff --git a/opt/infra/roles/user/tasks/main.yml b/opt/infra/roles/user/tasks/main.yml
new file mode 100644
index 00000000..b1b5be9b
--- /dev/null
+++ b/opt/infra/roles/user/tasks/main.yml
@@ -0,0 +1,35 @@
+- name: add group qtip
+  become: true
+  group: name=qtip state=present
+- name: add qtip to sudoers without password
+  become: true
+  file:
+    src: sudoers.d-qtip
+    dest: /etc/sudoers.d/50-qtip
+    mode: 0440
+- name: add users for ssh access
+  become: true
+  user:
+    name: "{{ item.name }}"
+    comment: "{{ item.comment }}"
+    groups: "qtip"
+    append: yes
+  with_items: "{{ users }}"
+- name: create .ssh directory
+  become: true
+  file:
+    path: "/home/{{ item.name }}/.ssh"
+    state: directory
+    owner: "{{ item.name }}"
+    group: "{{ item.name }}"
+    mode: 0700
+  with_items: "{{ users }}"
+- name: authorize public key
+  become: true
+  copy:
+    src: "{{ item.name }}.authorized_keys"
+    dest: "/home/{{ item.name }}/.ssh/authorized_keys"
+    owner: "{{ item.name }}"
+    group: "{{ item.name }}"
+    mode: 0600
+  with_items: "{{ users }}"