account: Added config for authorized_keys

group_vars/all/vars.yml

@@ -7,6 +7,8 @@ ansible_user: zocker
 ansible_become: yes
 ansible_become_pass: "{{ zocker_password }}"
 
+zocker_authorized_keys_url: "https://git.banananet.work/zocker.keys"
+
 update_scripts_directory: "/root/update"
 
 backup_gpg_fingerprint: "73D09948B2392D688A45DC8393E1BD26F6B02FB7"

roles/account/tasks/main.yml

@@ -37,6 +37,23 @@
     group: "{{ username }}"
     mode: "u=rwx,g=rx,o="
 
+- name: Configure ssh configration directory
+  file:
+    path: "{{ user_directory }}/.ssh"
+    state: directory
+    owner: "{{ username }}"
+    group: "{{ username }}"
+    mode: "u=rwx,g=rx,o="
+
+- name: Configure authorized_keys
+  get_url:
+    url: "{{ authorized_keys }}"
+    dest: "{{ user_directory }}/.ssh/authorized_keys"
+    force: yes
+    owner: "{{ username }}"
+    group: "{{ username }}"
+    mode: "u=rwx,g=rx,o="
+
 - name: Download oh-my-zsh for user {{ username }}
   become_user: "{{ username }}"
   git:

site.yml

@@ -44,6 +44,7 @@
     - role: account
       username: "zocker"
       password: "{{ zocker_password }}"
+      authorized_keys: "{{ zocker_authorized_keys_url }}"
       sudo: yes
 
 - name: Install wireguard vpn