infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

2fa_client: add tags so we can just run this by itself if needed.

Browse source 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2020-06-24 08:26:20 -07:00
parent 8031df3d70
commit 43b04c54f7
1 changed files with 5 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

7
tasks/2fa_client.yml
View file

@ -3,16 +3,19 @@
package: name=pam_url state=present package: name=pam_url state=present
tags: tags:
- packages - packages
- 2fa
- name: /etc/pki/tls/private/totpcgi.pem - name: /etc/pki/tls/private/totpcgi.pem
copy: src="{{ private }}/files/2fa-certs/keys/{{ inventory_hostname }}.pem" dest=/etc/pki/tls/private/totpcgi.pem mode=0400 copy: src="{{ private }}/files/2fa-certs/keys/{{ inventory_hostname }}.pem" dest=/etc/pki/tls/private/totpcgi.pem mode=0400
tags: tags:
- config - config
- 2fa
- name: /etc/pki/tls/private/totpcgi-ca.cert - name: /etc/pki/tls/private/totpcgi-ca.cert
copy: src="{{ private }}/files/2fa-certs/keys/ca.crt" dest=/etc/pki/tls/private/totpcgi-ca.cert mode=0400 copy: src="{{ private }}/files/2fa-certs/keys/ca.crt" dest=/etc/pki/tls/private/totpcgi-ca.cert mode=0400
tags: tags:
- config - config
- 2fa
- name: /etc/pam_url.conf - split for staging/phx2/everyone else - name: /etc/pam_url.conf - split for staging/phx2/everyone else
template: src={{ item }} dest=/etc/pam_url.conf mode=0644 template: src={{ item }} dest=/etc/pam_url.conf mode=0644
@ -24,6 +27,7 @@
tags: tags:
- config - config
- pam_url - pam_url
- 2fa
- name: /etc/pam.d/sudo - name: /etc/pam.d/sudo
copy: src={{ item }} dest=/etc/pam.d/sudo mode=0644 copy: src={{ item }} dest=/etc/pam.d/sudo mode=0644
@ -33,5 +37,4 @@
- "{{ files }}/2fa/sudo.pam" - "{{ files }}/2fa/sudo.pam"
tags: tags:
- config - config
- 2fa