diff --git a/bootstrap.yml b/bootstrap.yml index 4a86653..7545412 100644 --- a/bootstrap.yml +++ b/bootstrap.yml @@ -43,27 +43,38 @@ system: true gid: 701 - - name: Make sure /etc/sudoers.d exists - become: true - ansible.builtin.file: - path: /etc/sudoers.d - state: directory - owner: root - group: root - mode: u=rwx,go= + # - name: Make sure /etc/sudoers.d exists + # become: true + # ansible.builtin.file: + # path: /etc/sudoers.d + # state: directory + # owner: root + # group: root + # mode: u=rwx,go= - - name: Get /etc/sudoers.d/hpf + # - name: Get /etc/sudoers.d/hpf + # become: true + # ansible.builtin.copy: + # src: etc/sudoers.d/hpf + # dest: /etc/sudoers.d/hpf + # owner: root + # group: root + # mode: u=rw,go= + # backup: true + # validate: /usr/sbin/visudo -csf %s + + - name: Get /etc/sudoers.d become: true ansible.builtin.copy: - src: etc/sudoers.d/hpf - dest: /etc/sudoers.d/hpf + src: etc/sudoers.d/ + dest: /etc/ owner: root group: root - mode: u=rw,go= + directory_mode: u=rwx,go= + mode: u=rw,g=r,o= backup: true validate: /usr/sbin/visudo -csf %s - #### Configure sshd # - name: Make sure /etc/ssh/sshd_config.d exists