Files
configpolicy/domain-controller.yml
Dustin C. Hatch 1804bc06f0 domain-controller: Remove vault secrets
The secret values stored in this vault file were never actually used.
They weren't even correct.
2025-10-27 12:54:07 -05:00

16 lines
363 B
YAML

- import_playbook: samba-dc.yml
- hosts: samba-dc
roles:
- nsswitch
- system-auth
- sudo
tasks:
- name: ensure domain admins can use sudo
copy:
content: |
%domain\ admins ALL=(ALL) ALL
%{{ workgroup }}\\domain\ admins ALL=(ALL) ALL
dest: /etc/sudoers.d/10_domain-admins
mode: '0440'
validate: visudo -cf %s