45 lines
1.3 KiB
YAML
45 lines
1.3 KiB
YAML
---
|
|
- name: Check if user has ~/.ssh/config
|
|
stat:
|
|
path: "/home/{{ item.name }}/.ssh/config"
|
|
with_items: "{{ users }}"
|
|
register: sshconfig
|
|
|
|
|
|
- name: Create ~/.ssh/config when absent
|
|
file:
|
|
path: "/home/{{ item.item.name }}/.ssh/config"
|
|
owner: "{{ item.item.name }}"
|
|
group: "{{ item.item.name }}"
|
|
mode: 0600
|
|
state: touch
|
|
when: item.stat.exists == False
|
|
with_items:
|
|
- "{{ sshconfig.results }}"
|
|
no_log: True
|
|
|
|
|
|
- name: Configure ~/.ssh/config
|
|
blockinfile:
|
|
path: "/home/{{ item.0.name }}/.ssh/config"
|
|
owner: "{{ item.0.name }}"
|
|
group: "{{ item.0.name }}"
|
|
mode: 0600
|
|
marker: "# {mark} ANSIBLE MANAGED BLOCK"
|
|
content: |
|
|
{% for host in groups['all'] -%}
|
|
Host {{ hostvars[host]['ssh_short_name'] }}
|
|
Hostname {{ hostvars[host]['inventory_hostname'] }}
|
|
RemoteForward /home/{{ item.0.name }}/.gnupg/S.gpg-agent $HOME/.gnupg/S.gpg-agent
|
|
RemoteForward /home/{{ item.0.name }}/.gnupg/S.gpg-agent.ssh $HOME/.gnupg/S.gpg-agent.ssh
|
|
{% for k,v in item.1.items() %}
|
|
{% if k|lower != "host" and k|lower != "hostname" %}
|
|
{{k}} {{v}}
|
|
{% endif %}
|
|
{% endfor %}
|
|
{% endfor %}
|
|
with_subelements:
|
|
- "{{ users }}"
|
|
- ssh_config
|
|
- skip_missing: true
|