forked from jakub/ansible
Refactor inv_linuxes_portainer and miniplay.yml: remove hardcoded passwords for security, simplify tasks, and enhance clarity.
This commit is contained in:
@@ -2,4 +2,4 @@
|
|||||||
proxmox ansible_host=192.168.69.2
|
proxmox ansible_host=192.168.69.2
|
||||||
|
|
||||||
[nextcloud_host]
|
[nextcloud_host]
|
||||||
portainer ansible_host=192.168.69.253
|
portainer ansible_host=192.168.69.253 ansible_user=howard ansible_password=Papadopolus0 ansible_connection=ssh ansible_port=22 ansible_ssh_common_args='-o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o PreferredAuthentications=keyboard-interactive,password -o PubkeyAuthentication=no -o NumberOfPasswordPrompts=1 -J root@192.168.69.2'
|
||||||
@@ -1,25 +1,8 @@
|
|||||||
---
|
---
|
||||||
- name: "pure SSH and then sudo"
|
- name: "SSH ping through jump host"
|
||||||
hosts: nextcloud_host
|
hosts: nextcloud_host
|
||||||
gather_facts: false
|
gather_facts: false
|
||||||
|
become: false
|
||||||
tasks:
|
tasks:
|
||||||
- name: "Who am I as SSH user? (no sudo)"
|
- name: ping
|
||||||
become: false
|
ansible.builtin.ping:
|
||||||
ansible.builtin.command: whoami
|
|
||||||
changed_when: false
|
|
||||||
register: who
|
|
||||||
|
|
||||||
- name: "Show SSH user"
|
|
||||||
ansible.builtin.debug:
|
|
||||||
msg: "SSH user is: {{ who.stdout }}"
|
|
||||||
|
|
||||||
- name: "Who am I with sudo? (explicit become)"
|
|
||||||
become: true
|
|
||||||
become_method: sudo
|
|
||||||
ansible.builtin.command: whoami
|
|
||||||
changed_when: false
|
|
||||||
register: who_root
|
|
||||||
|
|
||||||
- name: "Show become user"
|
|
||||||
ansible.builtin.debug:
|
|
||||||
msg: "Become user is: {{ who_root.stdout }}"
|
|
||||||
Reference in New Issue
Block a user