x

bootstrap.yml

@@ -15,7 +15,7 @@
     - name: Install bootstrap packages
       become: true
       ansible.builtin.apt:
-        state: latest
+        state: present
         pkg:
           - bash
           - python3
@@ -150,6 +150,12 @@
       loop:
         - files/ssh-keys/heath.pub
 
+    - name: Lock the root user's password
+      become: true
+      ansible.builtin.user:
+        name: root
+        password_lock: true
+
 
 #### User: first
 
@@ -198,6 +204,7 @@
         append: true
         create_home: true
         shell: /usr/bin/bash
+        password_lock: true
 
     - name: Set hpf-ans's authorized_keys
       become: true
@@ -248,6 +255,7 @@
         append: true
         create_home: true
         shell: /usr/bin/bash
+        password: '$y$j9T$.NJVASBkVLnvqgznpcpdx1$7poH23pou7VHti3IfvDzwECdLtTcMercYNCeevgV.xC'
 
     - name: Set heath's authorized_keys
       become: true