Refactor ansible-apply.yaml to include playbook_login.yml

ansible/host_vars/contabo01.a13labs.pt.yml

@@ -1,17 +1,15 @@
-# Hostname and other host settings
 hostname: contabo01.a13labs.pt
-
-# SSH Connection and security
-sshd_port: 22
-ssh_allowed_networks:
-  - "0.0.0.0/0"
-sshd_admin_net: "0.0.0.0/0"
-sshd_allow_groups: "provision git users"
-sshd_permit_root_login: "no"
-sshd_password_authentication: "no"
-sshd_allow_tcp_forwarding: "yes"
 ansible_user: "{{ lookup('env', 'ANSIBLE_USER') }}"
+
+# Users
 login_users:
+  - username: "{{ ansible_user }}"
+    comment: "Managed by Ansible"
+    sudoer: true
+    sudoer_root_only: true
+    sudoer_no_password: true
+    pubkey: "{{ lookup('file', 'keys/ansible_user.pub') }}"
+    password_disabled: true
   - username: operator
     comment: "Managed by Ansible"
     sudoer: true
@@ -19,6 +17,18 @@ login_users:
   - username: git
     comment: "Managed by Ansible"
     shell: "/usr/local/bin/gitea-shell"
+    password_disabled: true
+    password_expiration: false
+
+# SSH Connection and security
+sshd_port: 22
+ssh_allowed_networks:
+  - "0.0.0.0/0"
+sshd_admin_net: "0.0.0.0/0"
+sshd_allow_groups: "{{ ansible_user }} git users"
+sshd_permit_root_login: "no"
+sshd_password_authentication: "no"
+sshd_allow_tcp_forwarding: "yes"
 
 # Due to an issue increase the number of max auth tries
 sshd_max_auth_tries: 10