Instead of installing authorized keys globally (same for everybody), we pass in the authorized_keys variable per user, and thus the installation also takes place per user. This makes much more sense and works with minimal refactoring.
16 lines
290 B
YAML
16 lines
290 B
YAML
---
|
|
|
|
system_timezone: "Europe/Berlin"
|
|
system_users:
|
|
- name: marty
|
|
groups:
|
|
- marty
|
|
- data
|
|
- incus-admin
|
|
authorized_keys:
|
|
- "{{ lookup('file', '~/.ssh/keys/bob.pub') }}"
|
|
- name: data
|
|
groups:
|
|
- data
|
|
create_home: false
|
|
shell: /sbin/nologin
|