Julien Dessaux
277f232657
The locked account set a password as '!' which prevents login with ssh keys on only Alpine Linux. Setting the hashed password to '*' still prevents ssh login with passwords but no longer blocks ssh keys.
27 lines
451 B
YAML
27 lines
451 B
YAML
---
|
|
- name: Create borg group on server
|
|
group:
|
|
name: borg
|
|
system: yes
|
|
|
|
- name: Create borg user on server
|
|
user:
|
|
name: borg
|
|
group: borg
|
|
shell: /bin/sh
|
|
home: /srv/borg
|
|
createhome: yes
|
|
system: yes
|
|
password: '*'
|
|
|
|
- name: Ensure borg directories exist on server
|
|
file:
|
|
state: directory
|
|
path: "{{ item }}"
|
|
owner: borg
|
|
mode: 0700
|
|
loop:
|
|
- /srv/borg
|
|
- /srv/borg/.ssh
|
|
- /srv/borg/repos
|
|
...
|