src.dualinventive.com/devops/ansible/roles/common/tasks/groups.yml

20 lines
427 B
YAML

###
# sftp
# used for chrooted sftp-only access (sshd_config.j2)
###
- name: Add SFTP group
group: name=sftp
become: true
###
# staff
# staff people may sudo without password at all times
###
- name: Add staff group
group: name=staff gid=50
become: true
- name: Add the staff-group to the sudoers
lineinfile: "dest=/etc/sudoers state=present regexp='^%staff' line='%staff ALL=(ALL) NOPASSWD: ALL'"
become: true