From 4e220486ff7d1cfa2f8e4e79dd6b3c43c3d8051b Mon Sep 17 00:00:00 2001 From: iRaven4522 Date: Sun, 30 Nov 2025 17:48:23 -0600 Subject: [PATCH] compliance ansible state indent --- linux/compliance_Alpine.yaml | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/linux/compliance_Alpine.yaml b/linux/compliance_Alpine.yaml index 2421a86..e8553b7 100644 --- a/linux/compliance_Alpine.yaml +++ b/linux/compliance_Alpine.yaml @@ -5,12 +5,14 @@ ansible.builtin.getent: database: group split: ':' + # Add doas package - name: Install doas (for Alpine systems). ansible.builtin.package: name: - doas - state: present + state: present + # User account (ansible) configuration - name: Add deployment user. user: @@ -22,6 +24,7 @@ groups: wheel append: yes when: "'wheel' in ansible_facts.getent_group" + # Ansible user SSH pub key # This is a really stupid way to do it, but alas. # This uses an environment variable named ansiblesvc_key in Semaphore which has the ssh-rsa pubkey. @@ -37,6 +40,7 @@ dest: /home/ansible/.ssh/authorized_keys owner: ansible group: ansible + # Add required packages because Debian is lame - name: Install standard packages if not already installed. # Looking at you LXCs. >.> @@ -49,6 +53,7 @@ - python3 - iftop state: present + # Give ansible doas rights with no password required. - name: Add doas rights with no password for deployment user (Alpine only) lineinfile: