diff options
| author | Ahmed Abdelhalim <[email protected]> | 2025-08-11 00:32:07 +0200 |
|---|---|---|
| committer | Ahmed Abdelhalim <[email protected]> | 2025-08-11 00:32:07 +0200 |
| commit | 652734b570bc728f02df99a7c570b119ddc5c4be (patch) | |
| tree | 356460fb60f2d8d13e6e1a8b1a7aaba9d04aa501 /roles/settings/tasks | |
| parent | 2d45a9b60a008581672af7a901258f488d3cde16 (diff) | |
Refactor: move password policy to its own role
Diffstat (limited to 'roles/settings/tasks')
| -rw-r--r-- | roles/settings/tasks/main.yml | 35 |
1 files changed, 0 insertions, 35 deletions
diff --git a/roles/settings/tasks/main.yml b/roles/settings/tasks/main.yml deleted file mode 100644 index 32fe9178..00000000 --- a/roles/settings/tasks/main.yml +++ /dev/null @@ -1,35 +0,0 @@ ---- -- name: "Include OS-specific variables" - ansible.builtin.include_vars: "{{ ansible_os_family | lower }}.yml" - -- name: "Ensure settings packages are installed" - become: true - ansible.builtin.package: - name: "{{ item }}" - state: "present" - with_items: - - "{{ settings_pw_quality }}" - -- name: "Configure archlinux password policy" - become: true - ansible.builtin.template: - src: "archlinux-pam-pw.j2" - dest: "/etc/pam.d/system-auth" - mode: "0644" - when: ansible_os_family == "Archlinux" - # Password policy is technically not required for boot, - # But it's quite nice to configure it for boot and therefore - # enforce the required policies/configurations wanted for the first passwrod change - tags: ["required_for_boot"] - -- name: "Configure debian password policy" - become: true - ansible.builtin.template: - src: "debian-pam-pw.j2" - dest: "/etc/pam.d/common-password" - mode: "0644" - when: ansible_os_family == "Debian" - # Password policy is technically not required for boot, - # But it's quite nice to configure it for boot and therefore - # enforce the required policies/configurations wanted for the first passwrod change - tags: ["required_for_boot"] |
