ansible account verstecken

[fsit-cmgt.git] / library / bootstrap.yml

diff --git a/library/bootstrap.yml b/library/bootstrap.yml
index 8b2f44b35d5811af429a6ee34a0abd7dca559ed0..bf91f25e1fb6441ced51ae8cb6267310cdbf8ce8 100644 (file)
--- a/library/bootstrap.yml
+++ b/library/bootstrap.yml
@@ -1,13 +1,21 @@
 ---
-   - name: change ansible-user password
-     user:
-       name: ansible
-       update_password: always
-       password: "{{ ansibleuser|password_hash('sha512') }}"
-   - name: hide system-account
-     copy:
-       src: fsit-cmgt/files/gdm-ansible
-       dest: /var/lib/AccountsService/users/ansible
+- name: change ansible-user password
+  ansible.builtin.user:
+    name: ansible
+    update_password: always
+    password: "{{ ansibleuser|password_hash('sha512') }}"
+- name: hide system-account
+    ansible.builtin.copy:
+    dest: /var/lib/AccountsService/users/ansible
+    content: |
+      [User]
+      Session=
+      XSession=
+      Icon=/home/ansible/.face
+      SystemAccount=true
+      
+      [InputSource0]
+      xkb=de
        #- name: stop automatic remote printer installation
        #ansible.builtin.systemd:
        #name: cups-browsed