1
1
Fork 0
mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2024-05-30 01:06:04 +02:00
infrastructure/roles/phrik/tasks/main.yml
Christian Heusel f38d013c04
validate the sudoers files before using
This is already done for the 'sudo' role, but we also have a few more
sudoers files which currently go in unverified.

Signed-off-by: Christian Heusel <christian@heusel.eu>
2024-04-24 19:28:19 +02:00

40 lines
1.2 KiB
YAML

- name: Install phrik utilities
pacman: name=git,pkgfile,polkit state=present
- name: Add phrik group
group: name=phrik gid=1100 state=present
- name: Add phrik user
user: name=phrik group=phrik uid=1100 comment="phrik IRC bot" createhome=yes
- name: Adding users to phrik group
user: groups=phrik name="{{ item }}" append=yes
with_items:
- demize
tags: ['archusers']
- name: Adding users to systemd-journal group for monitoring
user: groups=systemd-journal name="{{ item }}" append=yes
with_items:
- demize
tags: ['archusers']
- name: Install phrik sudoers config
copy: src=sudoers dest=/etc/sudoers.d/phrik owner=root group=root mode=0440 validate='visudo -cf %s'
- name: Install polkit rule for restarting phrik
copy: src=20-manage-phrik.rules dest=/etc/polkit-1/rules.d/20-manage-phrik.rules owner=root group=root mode=0644
- name: Install phrik systemd service
copy: src=phrik.service dest=/etc/systemd/system/phrik.service owner=root group=root mode=0644
- name: Start and enable pkgfile and phrikservice
systemd:
name: "{{ item }}"
enabled: true
state: started
daemon_reload: true
with_items:
- pkgfile-update.timer
- phrik.service