Fix: only set password if one is given

Previously this would set the encrypted password to xxx which means
authn never works. I'm so stupid that the only reason I breathe is
because my body doesn't let me have a vote in the matter.

1 files changed, 7 insertions, 1 deletions

diff --git a/roles/unix_users/tasks/main.yml b/roles/unix_users/tasks/main.yml
index adcb90e..19f0dac 100644
--- a/roles/unix_users/tasks/main.yml
+++ b/roles/unix_users/tasks/main.yml
@@ -5,7 +5,13 @@
     comment: "{{ item.comment|default('unnamed user') }}"
     shell: "{{ item.shell|default('/bin/bash') }}"
     system: "{{ item.system|default('no') }}"
-    password: "{{ item.password|default('xxx') }}"
+
+- name: set password for users
+  with_items: "{{ unix_users }}"
+  when: item.password is defined
+  user:
+    name: "{{ item.username }}"
+    password: "{{ item.password }}"
 
 - name: create ~/.ssh for each user
   with_items: "{{ unix_users }}"