ansible-borg-server-role/tasks/configure.yml
2023-02-17 14:28:38 +01:00

63 lines
1.4 KiB
YAML

---
- name: Create Group
ansible.builtin.group:
name: "{{ group }}"
state: present
- name: Create user
ansible.builtin.user:
name: "{{ user }}"
shell: /bin/bash
home: "{{ home }}"
createhome: true
group: "{{ group }}"
state: present
- name: Ensure home dir is present
ansible.builtin.file:
path: "{{ home }}"
owner: "{{ user }}"
group: "{{ group }}"
mode: 0700
state: directory
- name: Ensure ssh dir is present
ansible.builtin.file:
path: "{{ home }}/.ssh"
owner: "{{ user }}"
group: "{{ group }}"
mode: 0700
state: directory
- name: Ensure pool dir is present
ansible.builtin.file:
path: "{{ pool }}"
owner: "{{ user }}"
group: "{{ group }}"
mode: 0700
state: directory
- name: Create autorized key entry
ansible.posix.authorized_key:
user: "{{ user }}"
key: "{{ item.key }}"
key_options: 'command="cd {{ pool }}/{{ item.host }};borg serve --restrict-to-path {{ pool }}/{{ item.host }}",restrict'
with_items: "{{ auth_users }}"
- name: Ensure permission on authorized_keys file
ansible.builtin.file:
path: "{{ home }}/.ssh/authorized_keys"
owner: "{{ user }}"
group: "{{ group }}"
mode: 0600
state: file
- name: Ensure host pool dir is present
ansible.builtin.file:
path: "{{ pool }}/{{ item.host }}"
owner: "{{ user }}"
group: "{{ group }}"
mode: 0700
state: directory
with_items: "{{ auth_users }}"