ctucx.git: ansible-configs

roles/common/user: allow setting of ssh-keys for root user

diff --git a/roles/common/tasks/users.yml b/roles/common/tasks/users.yml
@@ -11,9 +11,10 @@
     append: yes
     name: "{{ item.name }}"
     group: "{{ item.name }}"
-    groups: "{{ item.groups }}"
+    groups: "{{ item.groups | default() }}"
     shell: "{{ item.shell | default('/bin/sh') }}"
     password: "{{item.password | password_hash('sha512', 'uD7ieghugeigh4eisoimoa3iushaeshechoonaequah5eiquerohph9paexai7oh') }}"
+  when: item.name != 'root'
   loop: "{{ system.users }}"
 
 - name: "Create ~/.ssh directory for users"

@@ -23,6 +24,7 @@
     mode: 0755
     owner: "{{ item.name }}"
     group: "{{ item.name }}"
+  when: item.name != 'root'
   loop: "{{ system.users }}"
 
 - name: "Place ssh-key for users"

@@ -32,4 +34,25 @@
     mode: 0644    
     owner: "{{ item.name }}"
     group: "{{ item.name }}"
-  loop: "{{ system.users }}"-
\ No newline at end of file
+  when: item.name != 'root'
+  loop: "{{ system.users }}"
+
+- name: "Create ~/.ssh directory for root"
+  file:
+    state: directory
+    dest: "/root/.ssh/"
+    mode: 0755
+    owner: "{{ item.name }}"
+    group: "{{ item.name }}"
+  when: item.name == 'root'
+  loop: "{{ system.users }}"
+
+- name: "Place ssh-key for root"
+  copy:
+    content: "{{ item.allowedSshKeys | join('\n') }}"
+    dest: "/root/.ssh/authorized_keys"
+    mode: 0644    
+    owner: "{{ item.name }}"
+    group: "{{ item.name }}"
+  when: item.name == 'root'
+  loop: "{{ system.users }}"