This commit is contained in:
parent
e65ffd5dc7
commit
2f9ca22e90
3 changed files with 17 additions and 14 deletions
|
@ -1,10 +1,18 @@
|
||||||
---
|
---
|
||||||
|
- name: Install revbank login shell
|
||||||
|
ansible.builtin.template:
|
||||||
|
src: login.sh
|
||||||
|
dest: /usr/local/bin/revbank-login
|
||||||
|
owner: root
|
||||||
|
group: root
|
||||||
|
mode: "0755"
|
||||||
|
|
||||||
- name: Add user
|
- name: Add user
|
||||||
ansible.builtin.user:
|
ansible.builtin.user:
|
||||||
name: bank
|
name: bank
|
||||||
password: $6$idklol$QrOE/21LDR0vhZBAXwgA7AvnmR6Ju4ZqzAzgeazC08i2yw9kyQjgwu.uuV692iL/cyE7AteDYUxCpcorONXom. # "bank"
|
password: $6$idklol$QrOE/21LDR0vhZBAXwgA7AvnmR6Ju4ZqzAzgeazC08i2yw9kyQjgwu.uuV692iL/cyE7AteDYUxCpcorONXom. # "bank"
|
||||||
home: /home/{{ bank_user }}
|
home: /home/{{ bank_user }}
|
||||||
shell: /home/{{ bank_user }}/revbank.git/revbank
|
shell: /usr/local/bin/revbank-login
|
||||||
update_password: always
|
update_password: always
|
||||||
|
|
||||||
- name: Allow password auth for bank user
|
- name: Allow password auth for bank user
|
||||||
|
@ -13,7 +21,7 @@
|
||||||
insertafter: EOF
|
insertafter: EOF
|
||||||
validate: "/usr/sbin/sshd -t -f %s"
|
validate: "/usr/sbin/sshd -t -f %s"
|
||||||
block: |-
|
block: |-
|
||||||
Match User bank
|
Match User {{ bank_user }}
|
||||||
PasswordAuthentication yes
|
PasswordAuthentication yes
|
||||||
notify: reload sshd
|
notify: reload sshd
|
||||||
|
|
||||||
|
|
|
@ -8,20 +8,9 @@
|
||||||
ansible.builtin.git:
|
ansible.builtin.git:
|
||||||
repo: "{{ bank_revbank_git }}"
|
repo: "{{ bank_revbank_git }}"
|
||||||
version: master
|
version: master
|
||||||
dest: /home/{{ bank_user }}/revbank.git
|
dest: /usr/local/share/revbank
|
||||||
accept_hostkey: yes
|
accept_hostkey: yes
|
||||||
|
|
||||||
- name: Link plugins
|
|
||||||
ansible.builtin.file:
|
|
||||||
state: link
|
|
||||||
src: "{{ item.src }}"
|
|
||||||
path: "{{ item.dest }}"
|
|
||||||
with_items:
|
|
||||||
- src: /home/{{ bank_user }}/revbank.git/plugins
|
|
||||||
dest: /home/{{ bank_user }}/plugins
|
|
||||||
- src: /home/{{ bank_user }}/revbank.git/data/plugins
|
|
||||||
dest: /home/{{ bank_user }}/.revbank/plugins
|
|
||||||
|
|
||||||
- name: Install git cronjob
|
- name: Install git cronjob
|
||||||
ansible.builtin.template:
|
ansible.builtin.template:
|
||||||
src: git.cron
|
src: git.cron
|
||||||
|
|
6
roles/bank/templates/login.sh
Normal file
6
roles/bank/templates/login.sh
Normal file
|
@ -0,0 +1,6 @@
|
||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
export REVBANK_DIR=/usr/local/share/revbank
|
||||||
|
export REVBANK_PLUGINS="$(cat $REVBANK_DIR/data/plugins | sed 's/ *#.*$//g' | sed '/^$/d' | tr '\n' ' ')"
|
||||||
|
|
||||||
|
$REVBANK_DIR/revbank
|
Loading…
Add table
Add a link
Reference in a new issue