summaryrefslogtreecommitdiff
path: root/worker.yml
diff options
context:
space:
mode:
authorLars Wirzenius <liw@liw.fi>2020-04-09 09:20:52 +0300
committerLars Wirzenius <liw@liw.fi>2020-04-09 09:20:52 +0300
commit7bf9d733d564a8961495d5d1517239f44a76e9f8 (patch)
treee84f14e79b533d3b5a06826485295d648dad46b5 /worker.yml
parentf270c36f40edd5ead9310670c2fae60a92c06340 (diff)
downloadick-contractor-7bf9d733d564a8961495d5d1517239f44a76e9f8.tar.gz
Change: drop manager account on worker
Let's keep things simpler. No reason worker can't have sudo.
Diffstat (limited to 'worker.yml')
-rw-r--r--worker.yml20
1 files changed, 2 insertions, 18 deletions
diff --git a/worker.yml b/worker.yml
index 583365d..7ca5959 100644
--- a/worker.yml
+++ b/worker.yml
@@ -34,26 +34,10 @@
owner: worker
group: worker
mode: 0600
- - user:
- comment: "Manager"
- name: manager
- shell: /bin/bash
- - file:
- state: directory
- path: /home/manager/.ssh
- owner: manager
- group: manager
- mode: 0700
- - copy:
- src: manager.key.pub
- dest: /home/manager/.ssh/authorized_keys
- owner: manager
- group: manager
- mode: 0600
- copy:
content: |
- manager ALL=(ALL:ALL) NOPASSWD: ALL
- dest: /etc/sudoers.d/manager
+ worker ALL=(ALL:ALL) NOPASSWD: ALL
+ dest: /etc/sudoers.d/worker
owner: root
group: root
mode: 0600