glennigen
f7a22cb3ec
Opretter /etc/sudoers.d/shutdown-nopasswd så brugeren kan køre /sbin/shutdown uden sudo-password — nødvendigt for shutdown/reboot scripts. Syntaks valideres med visudo inden filen skrives.
34 lines
885 B
YAML
34 lines
885 B
YAML
---
|
|
- name: System - hent brugernavn
|
|
ansible.builtin.command:
|
|
cmd: whoami
|
|
register: actual_user
|
|
become: false
|
|
changed_when: false
|
|
|
|
- name: System - sæt fish som login shell
|
|
ansible.builtin.user:
|
|
name: "{{ actual_user.stdout }}"
|
|
shell: /usr/bin/fish
|
|
|
|
- name: Tailscale - aktiver og start tailscaled
|
|
ansible.builtin.systemd:
|
|
name: tailscaled
|
|
enabled: true
|
|
state: started
|
|
|
|
- name: System - tillad shutdown uden password (til scripts)
|
|
ansible.builtin.lineinfile:
|
|
path: /etc/sudoers.d/shutdown-nopasswd
|
|
line: "{{ actual_user.stdout }} ALL=(ALL) NOPASSWD: /sbin/shutdown"
|
|
create: true
|
|
mode: '0440'
|
|
validate: 'visudo -cf %s'
|
|
|
|
- name: System - resolv.conf symlink (NetworkManager + systemd-resolved fix)
|
|
ansible.builtin.file:
|
|
src: /run/systemd/resolve/stub-resolv.conf
|
|
dest: /etc/resolv.conf
|
|
state: link
|
|
force: true
|