1 files changed, 23 insertions, 0 deletions
diff --git a/roles/unix_users/tasks/main.yml b/roles/unix_users/tasks/main.yml
new file mode 100644
index 0000000..ad9095f
--- /dev/null
+++ b/roles/unix_users/tasks/main.yml
@@ -0,0 +1,23 @@
+- name: create system users
+  with_items: "{{ unix_users }}"
+  user:
+    name: "{{ item.username }}"
+    comment: "{{ item.comment|default('unnamed user') }}"
+    shell: "{{ item.shell|default('/bin/bash') }}"
+    system: "{{ item.system|default('no') }}"
+
+- name: add keys to authorized_keys
+  with_items: "{{ unix_users }}"
+  authorized_key:
+    user: "{{ item.username }}"
+    key: "{{ lookup('file', authkeys_dir + '/' + item.username) }}"
+
+- name: give sudo access
+  with_items: "{{ unix_users }}"
+  when: "{{ item.sudo|default(False) }}"
+  copy:
+    content: "{{ item.username }} ALL=(ALL:ALL) NOPASSWD: ALL"
+    dest: "/etc/sudoers.d/{{ item.username }}"
+    owner: root
+    group: root
+    mode: 0600