From 652734b570bc728f02df99a7c570b119ddc5c4be Mon Sep 17 00:00:00 2001 From: Ahmed Abdelhalim Date: Mon, 11 Aug 2025 00:32:07 +0200 Subject: Refactor: move password policy to its own role --- roles/settings/tasks/main.yml | 35 ----------------------------------- 1 file changed, 35 deletions(-) delete mode 100644 roles/settings/tasks/main.yml (limited to 'roles/settings/tasks') diff --git a/roles/settings/tasks/main.yml b/roles/settings/tasks/main.yml deleted file mode 100644 index 32fe9178..00000000 --- a/roles/settings/tasks/main.yml +++ /dev/null @@ -1,35 +0,0 @@ ---- -- name: "Include OS-specific variables" - ansible.builtin.include_vars: "{{ ansible_os_family | lower }}.yml" - -- name: "Ensure settings packages are installed" - become: true - ansible.builtin.package: - name: "{{ item }}" - state: "present" - with_items: - - "{{ settings_pw_quality }}" - -- name: "Configure archlinux password policy" - become: true - ansible.builtin.template: - src: "archlinux-pam-pw.j2" - dest: "/etc/pam.d/system-auth" - mode: "0644" - when: ansible_os_family == "Archlinux" - # Password policy is technically not required for boot, - # But it's quite nice to configure it for boot and therefore - # enforce the required policies/configurations wanted for the first passwrod change - tags: ["required_for_boot"] - -- name: "Configure debian password policy" - become: true - ansible.builtin.template: - src: "debian-pam-pw.j2" - dest: "/etc/pam.d/common-password" - mode: "0644" - when: ansible_os_family == "Debian" - # Password policy is technically not required for boot, - # But it's quite nice to configure it for boot and therefore - # enforce the required policies/configurations wanted for the first passwrod change - tags: ["required_for_boot"] -- cgit v1.2.3