From 29b264142a1f948613270668d2e29b697c88e80a Mon Sep 17 00:00:00 2001 From: Ahmed AbdelHalim Date: Mon, 11 Aug 2025 00:32:07 +0200 Subject: Refactor: move password policy to its own role --- roles/password_policy/tasks/main.yml | 25 +++++++++++++++++++++++++ 1 file changed, 25 insertions(+) create mode 100644 roles/password_policy/tasks/main.yml (limited to 'roles/password_policy/tasks') diff --git a/roles/password_policy/tasks/main.yml b/roles/password_policy/tasks/main.yml new file mode 100644 index 00000000..10aa3837 --- /dev/null +++ b/roles/password_policy/tasks/main.yml @@ -0,0 +1,25 @@ +--- +- name: "Include OS-specific variables" + ansible.builtin.include_vars: "{{ ansible_os_family | lower }}.yml" + +- name: "Ensure password_policy package is installed" + become: true + ansible.builtin.package: + name: "{{ password_policy_pkg }}" + state: "present" + +- name: "Configure archlinux password policy" + become: true + ansible.builtin.template: + src: "archlinux-pam-pw.j2" + dest: "/etc/pam.d/system-auth" + mode: "0644" + when: ansible_os_family == "Archlinux" + +- name: "Configure debian password policy" + become: true + ansible.builtin.template: + src: "debian-pam-pw.j2" + dest: "/etc/pam.d/common-password" + mode: "0644" + when: ansible_os_family == "Debian" -- cgit v1.2.3