summaryrefslogtreecommitdiffstats
path: root/roles/settings/tasks/main.yml
diff options
context:
space:
mode:
authorAhmed Abdelhalim <[email protected]>2025-08-11 00:32:07 +0200
committerAhmed Abdelhalim <[email protected]>2025-08-11 00:32:07 +0200
commit652734b570bc728f02df99a7c570b119ddc5c4be (patch)
tree356460fb60f2d8d13e6e1a8b1a7aaba9d04aa501 /roles/settings/tasks/main.yml
parent2d45a9b60a008581672af7a901258f488d3cde16 (diff)
Refactor: move password policy to its own role
Diffstat (limited to 'roles/settings/tasks/main.yml')
-rw-r--r--roles/settings/tasks/main.yml35
1 files changed, 0 insertions, 35 deletions
diff --git a/roles/settings/tasks/main.yml b/roles/settings/tasks/main.yml
deleted file mode 100644
index 32fe9178..00000000
--- a/roles/settings/tasks/main.yml
+++ /dev/null
@@ -1,35 +0,0 @@
----
-- name: "Include OS-specific variables"
- ansible.builtin.include_vars: "{{ ansible_os_family | lower }}.yml"
-
-- name: "Ensure settings packages are installed"
- become: true
- ansible.builtin.package:
- name: "{{ item }}"
- state: "present"
- with_items:
- - "{{ settings_pw_quality }}"
-
-- name: "Configure archlinux password policy"
- become: true
- ansible.builtin.template:
- src: "archlinux-pam-pw.j2"
- dest: "/etc/pam.d/system-auth"
- mode: "0644"
- when: ansible_os_family == "Archlinux"
- # Password policy is technically not required for boot,
- # But it's quite nice to configure it for boot and therefore
- # enforce the required policies/configurations wanted for the first passwrod change
- tags: ["required_for_boot"]
-
-- name: "Configure debian password policy"
- become: true
- ansible.builtin.template:
- src: "debian-pam-pw.j2"
- dest: "/etc/pam.d/common-password"
- mode: "0644"
- when: ansible_os_family == "Debian"
- # Password policy is technically not required for boot,
- # But it's quite nice to configure it for boot and therefore
- # enforce the required policies/configurations wanted for the first passwrod change
- tags: ["required_for_boot"]