37 lines
950 B
YAML
37 lines
950 B
YAML
---
|
|
- block:
|
|
- name: Override default .bashrc for given users
|
|
template:
|
|
src: etc/bashrc.j2
|
|
dest: "{{ item }}"
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
loop: "{{ users_bash_bashrc_overrides }}"
|
|
|
|
- name: Setup custom bash profile at '/etc/profile.d/custom.sh'
|
|
template:
|
|
src: etc/profile.d/custom.sh.j2
|
|
dest: /etc/profile.d/custom.sh
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
|
|
- name: Set umask to /etc/login.defs
|
|
lineinfile:
|
|
path: /etc/login.defs
|
|
regexp: '^UMASK(\s+)'
|
|
line: 'UMASK\1{{ users_global_umask }}'
|
|
backrefs: yes
|
|
state: present
|
|
|
|
- name: Enforcing minimum password lifetime
|
|
lineinfile:
|
|
path: /etc/login.defs
|
|
regexp: '^PASS_MIN_DAYS(\s+)'
|
|
line: 'PASS_MIN_DAYS\1{{ users_pass_min_day }}'
|
|
backrefs: yes
|
|
state: present
|
|
become: True
|
|
become_user: root
|