v.1.0.0 bootstrap.yml; ansible-user on everry host

README.md

@@ -1,4 +1,4 @@
 ### runnning against default hosts
 ```shell script
-ansible-playbook --ask-become-pass system-upgrade.yml
+ansible-playbook --ask-become-pass bootstrap.yml
 ```

bootstrap.yml

@@ -0,0 +1,36 @@
+---
+
+- hosts: all
+  become: true
+
+  pre_tasks:
+  - name: update respository index
+    tags: always
+    ansible.builtin.apt:
+      update_cache: true
+
+
+- hosts: all
+  become: true
+
+  tasks:
+  - name: create ansible user with group
+    tags: always 
+    ansible.builtin.user:
+      name: ansible
+      group: ansible
+
+  - name: add ssh key for ansible
+    tags: always 
+    ansible.builtin.authorized_key:
+      user: ansible
+      key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOclevKIKKnVEgkVXjszax/bTfaBT9yNNfy2in2ZZoyU ansible"
+
+  - name: add sudoers file for ansible
+    tags: always 
+    ansible.builtin.copy:
+      src: sudoer_ansible
+      dest: /etc/sudoers.d/ansible
+      owner: root
+      group: root
+      mode: 0440

files/sudoer_ansible

@@ -0,0 +1 @@
+ansible ALL=(ALL) NOPASSWD:ALL

inventory

@@ -8,6 +8,11 @@ jenkins
 gitea
 pihole
 
+[pve]
+proxmox
+[pve:vars]
+ansible_user=root
+
 [vm]
 microk8s
 nginx