22 lines
555 B
YAML
22 lines
555 B
YAML
|
---
|
||
|
|
- name: Create unprivileged authority account
|
||
|
|
ansible.builtin.user:
|
||
|
|
name: railiance-clock
|
||
|
|
system: true
|
||
|
|
shell: /usr/sbin/nologin
|
||
|
|
create_home: false
|
||
|
|
- name: Create root-owned install tree
|
||
|
|
ansible.builtin.file:
|
||
|
|
path: "{{ railiance_clock_install_root }}"
|
||
|
|
state: directory
|
||
|
|
owner: root
|
||
|
|
group: root
|
||
|
|
mode: '0755'
|
||
|
|
- name: Create private signing-key directory
|
||
|
|
ansible.builtin.file:
|
||
|
|
path: "{{ railiance_clock_state_root }}"
|
||
|
|
state: directory
|
||
|
|
owner: railiance-clock
|
||
|
|
group: railiance-clock
|
||
|
|
mode: '0700'
|