bank: Use new REVBANK_PLUGINS env var

roles/bank/tasks/login.yaml

@@ -1,10 +1,18 @@
 ---
+- name: Install revbank login shell
+  ansible.builtin.template:
+    src: login.sh
+    dest: /usr/local/bin/revbank-login
+    owner: root
+    group: root
+    mode: "0755"
+
 - name: Add user
   ansible.builtin.user:
     name: bank
     password: $6$idklol$QrOE/21LDR0vhZBAXwgA7AvnmR6Ju4ZqzAzgeazC08i2yw9kyQjgwu.uuV692iL/cyE7AteDYUxCpcorONXom. # "bank"
     home: /home/{{ bank_user }}
-    shell: /home/{{ bank_user }}/revbank.git/revbank
+    shell: /usr/local/bin/revbank-login
     update_password: always
 
 - name: Allow password auth for bank user
@@ -13,7 +21,7 @@
     insertafter: EOF
     validate: "/usr/sbin/sshd -t -f %s"
     block: |-
-      Match User bank
+      Match User {{ bank_user }}
           PasswordAuthentication yes
   notify: reload sshd