Enable doas become plugin for non AD members
The new servers that are not members of the AD domain use `doas` instead of `sudo`.dynamic-inventory
parent
bc7e7c2475
commit
d2e8b9237f
|
@ -1,9 +1,17 @@
|
||||||
|
ansible_become_method: community.general.doas
|
||||||
|
ansible_become_password: unused
|
||||||
|
|
||||||
managed_users:
|
managed_users:
|
||||||
- name: dustin
|
- name: dustin
|
||||||
comment: Dustin C. Hatch
|
comment: Dustin C. Hatch
|
||||||
uid: 3000016
|
uid: 3000016
|
||||||
groups:
|
groups:
|
||||||
- wheel
|
- wheel
|
||||||
|
- name: jenkins
|
||||||
|
comment: Jenkins
|
||||||
|
uid: 3000018
|
||||||
|
groups:
|
||||||
|
- wheel
|
||||||
|
|
||||||
doas_authorized_ssh_keys: |
|
doas_authorized_ssh_keys: |
|
||||||
sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIF4yQAS0bAQ9Ymxgxv828MsX0z4ff/Fs//0PQOtPexRJAAAABHNzaDo= dustin@rosalina.pyrocufflink.blue
|
sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIF4yQAS0bAQ9Ymxgxv828MsX0z4ff/Fs//0PQOtPexRJAAAABHNzaDo= dustin@rosalina.pyrocufflink.blue
|
||||||
|
|
|
@ -1,3 +1,5 @@
|
||||||
|
ansible_become_method: sudo
|
||||||
|
|
||||||
krb5_realm: PYROCUFFLINK.BLUE
|
krb5_realm: PYROCUFFLINK.BLUE
|
||||||
samba_security: ads
|
samba_security: ads
|
||||||
samba_use_winbind: true
|
samba_use_winbind: true
|
||||||
|
|
Loading…
Reference in New Issue