41 lines
2.5 KiB
YAML
41 lines
2.5 KiB
YAML
---
|
|
# ── Admin groups ───────────────────────────────────────────────────────────────
|
|
# Add new users here. Each entry requires:
|
|
# username — Linux username
|
|
# ssh_key — public SSH key string (optional, but strongly recommended)
|
|
#
|
|
# To allow a group on a specific host/group, override `users_allowed_admin_groups`
|
|
# in the corresponding group_vars/<group>/vars.yml or host_vars/<host>/vars.yml.
|
|
|
|
users_admin_groups:
|
|
super_admin:
|
|
- username: s.lebed
|
|
ssh_key: >-
|
|
ssh-rsa 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 s.lebed@gigacoms.ru
|
|
|
|
- username: a.kazantsev
|
|
# Note: key comment says a.kazantsev — verify the key owner if needed
|
|
ssh_key: >-
|
|
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClB+roxcr/POfhJVq3jFIzZD36nRVhfYq9WaQBr6o2RvMHM+B/2yRM8OeN6jhhYYFB8z7X5o8j1/ZC2u/80LLJtEQ0s8DCb4l4Ie7IY3POBYlmwtvlnhNFsGlKoAoQr0jpPUwMiV7wdBtHYCqHJM69+VpWCnqOkI+hrdj5oxSm26g6AKL0lm9AJO8KnbIpUCHgnQ3EcPcfQE7OpspVP6nbp4SwipJbnG4yYeKB6l77ESUdCkgwwLCv4DCpxJ846J9aN39Bu273hmEoO6+Bw0wAPRruLp5/AzPni7frcncdGuPfOmi+RAoOsRqoO/c122soAbQn3074QtEKwuC+zFKH a.kazantsev@gigacoms.ru
|
|
|
|
middle_admin:
|
|
[]
|
|
# Example:
|
|
# - username: m.ivanov
|
|
# ssh_key: "ssh-rsa AAAA..."
|
|
|
|
junior_admin:
|
|
[]
|
|
# Example:
|
|
# - username: j.petrov
|
|
# ssh_key: "ssh-rsa AAAA..."
|
|
|
|
# ── Default access policy ──────────────────────────────────────────────────────
|
|
# Which admin groups are provisioned on hosts by default.
|
|
# Override in group_vars/<os_group>/vars.yml or host_vars/<host>/vars.yml
|
|
# to restrict access on specific servers.
|
|
users_allowed_admin_groups:
|
|
- super_admin
|
|
- middle_admin
|
|
- junior_admin
|