mirror of
https://pagure.io/fedora-infra/ansible.git
synced 2026-04-27 12:03:38 +08:00
26 lines
840 B
YAML
26 lines
840 B
YAML
---
|
|
- name: install pam_url
|
|
yum: name=pam_url state=installed
|
|
|
|
- name: /etc/pki/tls/private/totpcgi.pem
|
|
copy: src=$puppet_private/2fa-certs/keys/${inventory_hostname}.pem dest=/etc/pki/tls/private/totpcgi.pem mode=0400
|
|
|
|
- name: /etc/pki/tls/private/totpcgi-ca.cert
|
|
copy: src=$puppet_private/2fa-certs/keys/ca.crt dest=/etc/pki/tls/private/totpcgi-ca.cert mode=0400
|
|
|
|
- name: /etc/pam_url.conf - split for staging/phx2/everyone else
|
|
copy: src=$item dest=/etc/pam_url.conf mode=0644
|
|
with_first_found:
|
|
- $files/2fa/pam_url.conf.${inventory_hostname}
|
|
- $files/2fa/pam_url.conf.${ansible_domain}
|
|
- $files/2fa/pam_url.conf
|
|
|
|
- name: /etc/pam.d/sudo
|
|
copy: src=$item dest=/etc/pam.d/sudo mode=0644
|
|
with_first_found:
|
|
- $files/2fa/sudo.pam.${inventory_hostname}
|
|
- $files/2fa/sudo.pam.${ansible_domain}
|
|
- $files/2fa/sudo.pam
|
|
|
|
|