initial commit

roles/system-setup/tasks/user.yaml

@@ -0,0 +1,25 @@
+---
+- name: "Create a new user {{ username }}"
+  user:
+    name: "{{ username }}"
+    password: "{{ password | password_hash('sha512') }}"
+    groups:
+      - sudo
+    shell: "{{ shell }}"
+    state: present
+    append: true
+
+- name: Allow sudo to be used without a password
+  lineinfile:
+    path: /etc/sudoers
+    state: present
+    regexp: '^%sudo'
+    line: '%sudo ALL=(ALL) NOPASSWD: ALL'
+    validate: 'visudo -cf %s'
+  when: passwordless_sudo | bool
+
+- name: Copy over the public SSH key
+  authorized_key:
+    user: "{{ username }}"
+    state: present
+    key: "{{ lookup('file', ssh_pubkey_file) }}"