automatrop: Run ansible-lint --fix

This commit is contained in:
Geoffrey Frogeye 2023-11-02 19:51:54 +01:00
parent d60f5aaa9d
commit 9c3dcba2e5
Signed by: geoffrey
GPG key ID: C72403E7F82E6AD8
18 changed files with 342 additions and 333 deletions

View file

@ -1,34 +1,35 @@
---
- name: Setup pam_encryptfs auth
blockinfile:
ansible.builtin.blockinfile:
path: /etc/pam.d/system-auth
block: |
auth [success=1 default=ignore] pam_succeed_if.so service = systemd-user quiet
auth required pam_ecryptfs.so unwrap
insertafter: '^(auth\s+required\s+pam_unix.so|auth\s+\[default=die\]\s+pam_faillock.so\s+authfail)$'
insertafter: ^(auth\s+required\s+pam_unix.so|auth\s+\[default=die\]\s+pam_faillock.so\s+authfail)$
marker: "# {mark} AUTOMATROP ECRYPTFS_AUTOMOUNT AUTH"
become: yes
become: true
notify:
- etc changed
- name: Setup pam_encryptfs password
blockinfile:
ansible.builtin.blockinfile:
path: /etc/pam.d/system-auth
block: |
password optional pam_ecryptfs.so unwrap
insertbefore: '^(password\s+required\s+pam_unix.so|-password\s+\[success=1\s+default=ignore\]\s+pam_systemd_home.so)$'
insertbefore: ^(password\s+required\s+pam_unix.so|-password\s+\[success=1\s+default=ignore\]\s+pam_systemd_home.so)$
marker: "# {mark} AUTOMATROP ECRYPTFS_AUTOMOUNT PASSWORD"
become: yes
become: true
notify:
- etc changed
- name: Setup pam_encryptfs session
blockinfile:
ansible.builtin.blockinfile:
path: /etc/pam.d/system-auth
block: |
session [success=1 default=ignore] pam_succeed_if.so service = systemd-user quiet
session optional pam_ecryptfs.so unwrap
insertafter: '^session\s+required\s+pam_unix.so$'
insertafter: ^session\s+required\s+pam_unix.so$
marker: "# {mark} AUTOMATROP ECRYPTFS_AUTOMOUNT SESSION"
become: yes
become: true
notify:
- etc changed