setup_lab_user.yml

---

- name: Create lab-user
  user:
    name: "{{ lab_user }}"
    group: "users"
    state: present

- name: Enable sudoers
  lineinfile:
    path: '/etc/sudoers'
    state: present
    line: "{{ lab_user }}  ALL=(ALL) NOPASSWD: ALL"
    insertafter: 'EOF'

- when: setup_lab_materials | default(false) | bool
  name: Create lab_materials dir
  file:
    dest: /home/{{ lab_user }}/lab_materials
    mode: 0755
    owner: "{{ lab_user }}"
    group: "users"
    state: directory

- name: lab_user ssh setup
  block:

    - name: create /home/{{ lab_user }}/.ssh
      file:
        dest: /home/{{ lab_user }}/.ssh
        mode: 0700
        owner: "{{ lab_user }}"
        group: "users"
        state: directory

    - name: copy the environment .pem key
      copy:
        src: "{{ output_dir }}/{{ env_authorized_key }}"
        dest: "/home/{{ lab_user }}/.ssh/{{env_authorized_key}}.pem"
        owner: "{{ lab_user }}"
        group: "users"
        mode: 0400

    - name: copy the environment .pub key
      copy:
        src: "{{ output_dir }}/{{ env_authorized_key }}.pub"
        dest: "/home/{{ lab_user }}/.ssh/{{env_authorized_key}}.pub"
        owner: "{{ lab_user }}"
        group: "users"
        mode: 0400

    - name: copy .ssh/config template
      template:
        src: ./files/ssh_config.j2
        dest: /home/{{ lab_user }}/.ssh/config
        owner: "{{ lab_user }}"
        group: "users"
        mode: 0400

...