add_vars_to_user_deploy_user_provision

roles/debian/user_ansible/defaults/main.yml

@@ -7,14 +7,14 @@ user_ansible:
   create: true # if you know the user already exists, set this to false to not create the user.
   create_home: true
   update_password: "always"
-  # Optional Linux uid and gid for user
+  # It is often desirable to fix POSIX IDs for system users so they are consistent across your fleet
+  # This is shown for documentation, you should do this in your config repo
   # uid: 999
   # gid: 999
   # Local username of the deploy user.
   utility_host: "localhost"
   utility_username: "{{ _user_ansible_username }}"
-  sudoer:
-    false
+  sudoer: false
   # List of additional groups to add the user to.
   groups: []
   # List of SSH pub keys to authorize. These must be provided as strings (content of the pub key).

roles/debian/user_deploy/defaults/main.yml

@@ -7,6 +7,7 @@ user_deploy:
   home: "/home/{{ _user_deploy_username }}"
   create: true # if you know the user already exists, set this to false to not create the user.
   create_home: true
+  update_password: "always"
   # It is often desirable to fix POSIX IDs for system users so they are consistent across your fleet
   # This is shown for documentation, you should do this in your config repo
   # uid: 989
@@ -18,8 +19,13 @@ user_deploy:
   # List of additional groups to add the user to.
   groups:
     - docker # add the docker group so we can do container builds
+  # List of SSH pub keys to authorize. These must be provided as strings (content of the pub key).
   ssh_keys: []
+  # List of SSH private keys to add to server. These must be provided as strings (content of the private key).
+  # Be sure to store securely using SOPS or similar.
   # If you add more than one key here, make sure the original private key of your deploy server is the first.
   ssh_private_keys: []
+  # List of hostnames to add to known_hosts.
   known_hosts: []
+  # Whether or not to hash any provided hosts for known_hosts.
   known_hosts_hash: true

roles/debian/user_provision/defaults/main.yml

@@ -6,6 +6,7 @@ user_provision:
   home: "/home/{{ _user_provision_username }}"
   create: true # if you know the user already exists, set this to false to not create the user.
   create_home: true
+  update_password: "always"
   # It is often desirable to fix POSIX IDs for system users so they are consistent across your fleet
   # This is shown for documentation, you should do this in your config repo
   # uid: 988
@@ -14,9 +15,15 @@ user_provision:
   utility_host: "localhost"
   utility_username: "{{ _user_provision_username }}"
   sudoer: true
+  # List of additional groups to add the user to.
   groups: []
+  # List of SSH pub keys to authorize. These must be provided as strings (content of the pub key).
   ssh_keys: []
+  # List of SSH private keys to add to server. These must be provided as strings (content of the private key).
+  # Be sure to store securely using SOPS or similar.
   # If you add more than one key here, make sure the original private key of your infra controller server is the first.
   ssh_private_keys: []
+  # List of hostnames to add to known_hosts.
   known_hosts: []
+  # Whether or not to hash any provided hosts for known_hosts.
   known_hosts_hash: true