Safer Ansible

ansible/cluster_nodes.yml

@@ -9,8 +9,9 @@
     - role: users
       tags: account
 
-    - role: network
+# UNSAFE
-      tags: net
+#    - role: network
+#      tags: net
 
     - role: consul
       tags: kv
@@ -18,5 +19,6 @@
     - role: nomad
       tags: orchestrator
 
-    - role: storage
+# UNSAFE
-      tags: sto
+#   - role: storage
+#      tags: sto

ansible/roles/common/tasks/main.yml

@@ -40,3 +40,12 @@
       - strace
       - sudo
     state: present
+
+- name: "Passwordless sudo"
+  lineinfile:
+    path: /etc/sudoers
+    state: present
+    regexp: '^%sudo'
+    line: '%sudo ALL=(ALL) NOPASSWD: ALL'
+    validate: 'visudo -cf %s'
+

ansible/roles/users/vars/main.yml

@@ -11,13 +11,7 @@ active_users:
     ssh_keys: 
       - 'alex-key1.pub'
 
-  - username: 'erwan'
-    ssh_keys:
-      - 'erwan-key1.pub'
-
-  - username: 'valentin'
-    ssh_keys:
-      - 'valentin-key1.pub'
-
 disabled_users:
   - 'john.doe'
+  - 'erwan'
+  - 'valentin'