Vendor Galaxy Roles and Collections

ansible_collections/debops/debops/roles/auth/tasks/auth/post_main.yml

@@ -0,0 +1,4 @@
+---
+# Copyright (C) 2013-2017 Maciej Delmanowski <drybjed@gmail.com>
+# Copyright (C) 2014-2017 DebOps <https://debops.org/>
+# SPDX-License-Identifier: GPL-3.0-only

ansible_collections/debops/debops/roles/auth/tasks/auth/pre_main.yml

@@ -0,0 +1,4 @@
+---
+# Copyright (C) 2013-2017 Maciej Delmanowski <drybjed@gmail.com>
+# Copyright (C) 2014-2017 DebOps <https://debops.org/>
+# SPDX-License-Identifier: GPL-3.0-only

ansible_collections/debops/debops/roles/auth/tasks/main.yml

@@ -0,0 +1,40 @@
+---
+# Copyright (C) 2013-2017 Maciej Delmanowski <drybjed@gmail.com>
+# Copyright (C) 2014-2017 DebOps <https://debops.org/>
+# SPDX-License-Identifier: GPL-3.0-only
+
+- name: Import custom Ansible plugins
+  ansible.builtin.import_role:
+    name: 'ansible_plugins'
+
+- name: Import DebOps secret role
+  ansible.builtin.import_role:
+    name: 'secret'
+
+- name: DebOps pre_tasks hook
+  ansible.builtin.include_tasks: "{{ lookup('debops.debops.task_src', 'auth/pre_main.yml') }}"
+
+- name: Install auth-related packages
+  ansible.builtin.apt:
+    name: '{{ auth_packages | flatten }}'
+    state: 'present'
+    install_recommends: 'no'
+  register: auth__register_packages
+  until: auth__register_packages is succeeded
+
+- name: Configure pam_cracklib
+  ansible.builtin.template:
+    src: 'usr/share/pam-configs/cracklib.j2'
+    dest: '/usr/share/pam-configs/cracklib'
+    owner: 'root'
+    group: 'root'
+    mode: '0644'
+  notify: [ 'Update PAM common configuration' ]
+  when: auth_cracklib | bool
+
+- name: Configure PAM password history module
+  ansible.builtin.include_tasks: pam_pwhistory.yml
+  when: auth_pwhistory_remember is defined and auth_pwhistory_remember
+
+- name: DebOps post_tasks hook
+  ansible.builtin.include_tasks: "{{ lookup('debops.debops.task_src', 'auth/post_main.yml') }}"

ansible_collections/debops/debops/roles/auth/tasks/pam_pwhistory.yml

@@ -0,0 +1,27 @@
+---
+# Copyright (C) 2013-2017 Maciej Delmanowski <drybjed@gmail.com>
+# Copyright (C) 2014-2017 DebOps <https://debops.org/>
+# SPDX-License-Identifier: GPL-3.0-only
+
+- name: Check if password history database exists
+  ansible.builtin.stat:
+    path: '/etc/security/opasswd'
+  register: auth_register_opasswd
+
+- name: Configure password history database
+  ansible.builtin.file:
+    path: '/etc/security/opasswd'
+    state: 'touch'
+    owner: 'root'
+    group: 'root'
+    mode: '0600'
+  when: auth_register_opasswd is defined and not auth_register_opasswd.stat.exists
+
+- name: Configure pam_pwhistory
+  ansible.builtin.template:
+    src: 'usr/share/pam-configs/pwhistory.j2'
+    dest: '/usr/share/pam-configs/pwhistory'
+    owner: 'root'
+    group: 'root'
+    mode: '0644'
+  notify: [ 'Update PAM common configuration' ]