Fri, 16 Aug 2019 19:16:06 -0400
no unattended-upgrades by default
--- - name: "Ansible control user" user: name: ansible comment: "Ansible Controller" home: /var/lib/ansible createhome: true append: true system: true state: present - name: "Ansible pubkeys" authorized_key: manage_dir: true user: ansible key: "{{ item }}" with_file: - 'public_keys/ansible' - name: "Ansible sudo" lineinfile: dest: /etc/sudoers state: present regexp: '^ansible' line: 'ansible ALL=(ALL) NOPASSWD: ALL' validate: 'visudo -cf "%s"'