07-users.ymal

- hosts: dev 
  become: yes
  remote_user: colins
  # vars:
  #   ansible_ssh_private_key_file: "/home/devopsmasterjan2023/.ssh/ansible"
  tasks:
  - name: Create Systems admin  User
    user:
      name: desmond 
      create_home: true
      shell: /bin/bash
      comment: "desmond  Management Account"
      expires: -1
      password: "{{ 'DevOps@2020' | password_hash('sha512','A512') }}"
  - name: Setup Sudo Access for Devops User
    copy:
      dest: /etc/sudoers.d/desmond 
      content: 'desmond  ALL=(ALL) NOPASSWD: ALL' 
      validate: /usr/sbin/visudo -cf %s
  -  name: Disable Password Authentication
     lineinfile:
        dest=/etc/ssh/sshd_config
        regexp='^PasswordAuthentication'
        line="PasswordAuthentication yes"
        state=present
        backup=yes
     notify:
       - restart ssh
  handlers:
  - name: restart ssh
    service:
      name=sshd
      state=restarted