Part00/added rollback playbook

part00-getting-ready/ansible-learning-rollback.yml

@@ -0,0 +1,22 @@
+---
+- name: Revert devops Account
+  hosts: all
+  become: true
+  gather_facts: False
+  tasks:
+    - name: Remove ssh key
+      authorized_key:
+        user: devops
+        key: "{{ lookup('file', lookup('env', 'HOME') + '/.ssh/id_rsa.pub') }}"
+        state: absent
+
+    - name: Remove account
+      user:
+        name: devops
+        state: absent
+        remove: yes
+
+    - name: Remove sudo access
+      file:
+        path: /etc/sudoers.d/devops
+        state: absent

part00-getting-ready/ansible.cfg

@@ -1,6 +1,7 @@
 [defaults]
 inventory = inventory
 remote_user = devops
+
 [privilege_escalation]
 become = true
 become_user = root

part01-create-user/create-user.yml

@@ -1,14 +1,15 @@
 ---
 - hosts: all
   become: true
+  gather_facts: False
   vars:
     the_user: "devops"
 
   tasks:
     - name: create-user
       user:
         name: "{{ the_user }}"
-        groups: root,wheel
+        groups: root
         shell: /bin/bash
         state: present
         create_home: yes
@@ -20,9 +21,16 @@
         ssh_key_bits: 2048
         ssh_key_file: .ssh/id_rsa
 
+    - name: Copy local SSH public key to target
+      authorized_key:
+        user: "{{ the_user }}"
+        state: present
+        manage_dir: yes
+        key: "{{ lookup('file', lookup('env','HOME') + '/.ssh/id_rsa.pub') }}"
+
     - name: set password
       user:
         name: "{{ the_user }}"
         password: "password"
         password_expire_min: 14
-        password_expire_max: 60
+        password_expire_max: 60