From 94cd4d522bca26e08b537a3557934e3e4be47182 Mon Sep 17 00:00:00 2001
From: iRaven4522 <horse@iraven.net>
Date: Sun, 30 Nov 2025 18:43:17 -0600
Subject: [PATCH] compliance - no password lock on ansible user

---
 linux/compliance.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/linux/compliance.yaml b/linux/compliance.yaml
index 1910f13..c51eb60 100644
--- a/linux/compliance.yaml
+++ b/linux/compliance.yaml
@@ -19,6 +19,7 @@
       user:
         name: ansible
         state: present
+        password_lock: false
 
     # Ansible user SSH pub key
     # This is a really stupid way to do it, but alas.
@@ -42,7 +43,6 @@
         name: nhadmin
         state: present
         password: "{{ nhadmin_password | password_hash('sha512') }}"
-        shell: /bin/bash
 
     # Sysadmin user SSH pub key
     # This is a really stupid way to do it, but alas.