bootstrap.yml

---
- hosts: local
  remote_user: root
  gather_facts: true
  vars_files:
    - "vars/vault.yml"
    - "vars/vars.yml"

  tasks:
    - name: Ensure user groups exists
      group:
        name: "{{ item }}"
        state: present
      loop:
        - "{{ main_username }}"
        - ansible

    - name: Add users
      user:
        name: "{{ item.user }}"
        password: "{{ item.pass }}"
        groups:
          - "{{ item.user }}"
          - sudo
        shell: /bin/bash
      loop:
        "{{ users }}"
      no_log: true

    - name: Add sudoers file for ansible
      copy:
        src: sudoer_ansible
        dest: /etc/sudoers.d/ansible
        owner: root
        group: root
        mode: 0440

    - name: SSH Keys
      authorized_key:
        user: "{{ item.user }}"
        state: present
        key: "{{ item.ssh }}"
      loop:
        - {user: "{{ main_username }}", ssh: "{{ ssh_pubkey }}"}
        - {user: "ansible", ssh: "{{ ssh_pubkey }}"}

    - name: Restart ssh
      service:
        name: sshd
        state: restarted