79 lines
2.4 KiB
YAML
79 lines
2.4 KiB
YAML
- name: Setup Users
|
|
hosts: filehost.unruhig.eu
|
|
gather_facts: false
|
|
tasks:
|
|
- name: Create user [backup]
|
|
become: true
|
|
ansible.builtin.user:
|
|
name: backup
|
|
comment: Used for receiving borg backups
|
|
shell: /bin/bash
|
|
create_home: true
|
|
state: present
|
|
generate_ssh_key: true
|
|
ssh_key_type: "ed25519"
|
|
ssh_key_file: ".ssh/storagebox"
|
|
- name: Create mount directory
|
|
become: true
|
|
become_user: backup
|
|
ansible.builtin.file:
|
|
path: "/home/backup/storagebox"
|
|
state: directory
|
|
owner: backup
|
|
group: backup
|
|
mode: '0700'
|
|
- name: Create user [files]
|
|
become: true
|
|
ansible.builtin.user:
|
|
name: files
|
|
comment: Used for providing access to files
|
|
shell: /bin/bash
|
|
create_home: true
|
|
state: present
|
|
generate_ssh_key: true
|
|
ssh_key_type: "ed25519"
|
|
ssh_key_file: ".ssh/storagebox"
|
|
- name: Create mount directory
|
|
become: true
|
|
become_user: files
|
|
ansible.builtin.file:
|
|
path: "/home/files/data"
|
|
state: directory
|
|
owner: files
|
|
group: files
|
|
mode: '0700'
|
|
|
|
- name: Setup mounts
|
|
hosts: filehost.unruhig.eu
|
|
become: true
|
|
become_user: root
|
|
pre_tasks:
|
|
- name: Info user [backup]
|
|
become: true
|
|
ansible.builtin.user:
|
|
name: backup
|
|
state: present
|
|
register: user_backup
|
|
- name: Info user [files]
|
|
become: true
|
|
ansible.builtin.user:
|
|
name: files
|
|
state: present
|
|
register: user_files
|
|
roles:
|
|
- role: ansible_systemd_mounts
|
|
mounts:
|
|
backup:
|
|
share: "//{{ backup.cifs.host }}/{{ backup.cifs.user }}"
|
|
mount: "{{ user_backup.home }}/storagebox"
|
|
type: "cifs"
|
|
options: "_netdev,iocharset=utf8,seal,x-systemd.automount,username={{ backup.cifs.user }},password={{ backup.cifs.password }},uid={{ user_backup.uid }},gid={{ user_backup.group }}"
|
|
automount: true
|
|
files:
|
|
share: "//{{ files.cifs.host }}/{{ files.cifs.user }}"
|
|
mount: "{{ user_files.home }}/data"
|
|
type: "cifs"
|
|
options: "_netdev,iocharset=utf8,seal,x-systemd.automount,username={{ files.cifs.user }},password={{ files.cifs.password }},uid={{ user_files.uid }},gid={{ user_files.group }}"
|
|
automount: true
|
|
# vim: ft=yaml.ansible
|