diff --git a/defaults/main.yaml b/defaults/main.yaml index bf129a3..4222854 100644 --- a/defaults/main.yaml +++ b/defaults/main.yaml @@ -21,6 +21,10 @@ ssh_user_name: ssh_user_home: "/home/{{ ssh_user_name }}" ssh_user_group: "{{ ssh_user_name }}" +ssh_authorized_keys_content: +ssh_authorized_keys_dest: "{{ ssh_user_home }}/.ssh/authorized_keys" +ssh_authorized_keys_src: authorized_keys.j2 + ssh_key_private_content: ssh_key_private_dest: "{{ ssh_user_home }}/.ssh/id_rsa" ssh_key_private_src: id_rsa.j2 diff --git a/tasks/config.yaml b/tasks/config.yaml index c3af9c7..1ca6b04 100644 --- a/tasks/config.yaml +++ b/tasks/config.yaml @@ -21,6 +21,16 @@ owner: "{{ ssh_user_name }}" state: directory +- name: Create ssh authorized_keys file + become: yes + template: + dest: "{{ ssh_authorized_keys_dest }}" + group: "{{ ssh_user_group }}" + mode: 0600 + owner: "{{ ssh_user_name }}" + src: "{{ ssh_authorized_keys_src }}" + when: ssh_authorized_keys_content | default(False) + - name: Create ssh known_hosts file become: yes template: diff --git a/templates/authorized_keys.j2 b/templates/authorized_keys.j2 new file mode 100644 index 0000000..0409ecc --- /dev/null +++ b/templates/authorized_keys.j2 @@ -0,0 +1,4 @@ +# This file is generated by Ansible +# DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN +# +{{ ssh_authorized_keys_content }}