ac11734cf9
This has got me a number of times; I think we can tell in review if a task firing in response to a "changed" is best in a handler or not. Remove existing noqa flags Change-Id: I80ad631f978eeeb9903abe230a95f23f5709d20e
32 lines
969 B
YAML
32 lines
969 B
YAML
# note bup_user is the parent loop variable name; this works on each
|
|
# element from the bup_users global.
|
|
- name: Set variables
|
|
set_fact:
|
|
user_name: '{{ bup_user[0] }}'
|
|
user_key: '{{ bup_user[1] }}'
|
|
|
|
- name: Create bup user
|
|
user:
|
|
name: '{{ user_name }}'
|
|
comment: 'Backup user'
|
|
shell: /bin/bash
|
|
home: '/opt/backups/{{ user_name }}'
|
|
create_home: yes
|
|
register: homedir
|
|
|
|
- name: Create bup user authorized key
|
|
authorized_key:
|
|
user: '{{ user_name }}'
|
|
state: present
|
|
key: '{{ user_key }}'
|
|
key_options: 'command="BUP_DEBUG=0 BUP_FORCE_TTY=3 bup server",no-port-forwarding,no-agent-forwarding,no-X11-forwarding,no-pty'
|
|
|
|
# ansible-lint wants this in a handler, it should be done here and
|
|
# now; this isn't like a service restart where multiple things might
|
|
# call it.
|
|
- name: Initalise bup
|
|
shell: |
|
|
BUP_DIR=/opt/backups/{{ user_name }}/.bup bup init
|
|
become: yes
|
|
become_user: '{{ user_name }}'
|
|
when: homedir.changed |