blob: a8dfe23e7c814ef218a8e922b2c70a5e645d1e23 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
|
---
- name: Create borg_server_user on server
when: borg_server_user_create
block:
- name: Create borg user
ansible.builtin.user:
name: "{{ borg_server_user }}"
comment: Borgbackup user
create_home: true
home: "{{ borg_server_user_home }}"
generate_ssh_key: false
become: true
delegate_to: "{{ borg_server_host }}"
- name: Ensure borg_server_user exists
ansible.builtin.getent:
database: passwd
key: "{{ borg_server_user }}"
become: true
delegate_to: "{{ borg_server_host }}"
- name: Fail if borg_server_user does not exist
ansible.builtin.fail:
msg: |
User {{ borg_server_user }} does not exist on {{ borg_server_host }}.
Please create the user before running this role or set borg_server_user_create: true.
when: ansible_facts.getent_passwd[borg_server_user] is not defined
delegate_to: "{{ borg_server_host }}"
- name: Ensure borg server user home directory exists
ansible.builtin.file:
path: "{{ borg_server_user_home }}"
state: directory
owner: "{{ borg_server_user }}"
group: "{{ borg_server_user }}"
mode: "0700"
become: true
delegate_to: "{{ borg_server_host }}"
- name: Ensure .ssh directory exists
ansible.builtin.file:
path: "{{ borg_server_user_home }}/.ssh"
state: directory
owner: "{{ borg_server_user }}"
group: "{{ borg_server_user }}"
mode: "0700"
become: true
delegate_to: "{{ borg_server_host }}"
- name: Ensure authorized_keys file exists
ansible.builtin.file:
path: "{{ borg_server_user_home }}/.ssh/authorized_keys"
state: touch
owner: "{{ borg_server_user }}"
group: "{{ borg_server_user }}"
mode: "0600"
access_time: preserve
modification_time: preserve
become: true
delegate_to: "{{ borg_server_host }}"
|
