summaryrefslogtreecommitdiffstats
path: root/roles/user/tasks/main.yml
diff options
context:
space:
mode:
Diffstat (limited to 'roles/user/tasks/main.yml')
-rw-r--r--roles/user/tasks/main.yml20
1 files changed, 18 insertions, 2 deletions
diff --git a/roles/user/tasks/main.yml b/roles/user/tasks/main.yml
index 1177b707..bebedfcb 100644
--- a/roles/user/tasks/main.yml
+++ b/roles/user/tasks/main.yml
@@ -10,7 +10,7 @@
state: "present"
loop: "{{ user_groups }}"
-- name: "Create user: {{ username }}"
+- name: "Create user with user_default_password"
# noqa var-naming[no-role-prefix] username is more understandable than user_name
become: true
ansible.builtin.user:
@@ -19,13 +19,29 @@
create_home: true
generate_ssh_key: false
groups: "{{ user_groups }}"
- password: "{{ user_password }}"
+ password: "{{ user_default_password }}"
shell: "/bin/bash"
state: "present"
update_password: "on_create"
register: user
notify: "Require password change"
+ when: not user_password is defined
+
+- name: "Create user with user_password"
+ # noqa var-naming[no-role-prefix] username is more understandable than user_name
+ become: true
+ ansible.builtin.user:
+ name: "{{ username }}"
+ append: true
+ create_home: true
+ generate_ssh_key: false
+ groups: "{{ user_groups }}"
+ password: "{{ user_password }}"
+ shell: "/bin/bash"
+ state: "present"
+ update_password: "on_create"
no_log: true
+ when: user_password is defined
- name: "Create user ssh directory"
ansible.builtin.file: