bootstrap.yml

---

- hosts: all
  become: true

  pre_tasks:
  - name: install updates
    tags: always
    ansible.builtin.apt:
      update_cache: yes
      upgrade: dist

- hosts : all
  become: true

  tasks:
  - name: Include ansible user and ssh key from ssh_config.yaml
    ansible.builtin.include_vars:
      file: ssh_config.yaml

  - name: create ansible user
    tags: always
    ansible.builtin.user:
      name: "{{ user_for_ansible }}"
      shell: /bin/bash
      state: present

  - name: add ssh key
    tags: always
    ansible.builtin.authorized_key:
      user: "{{ user_for_ansible }}"
      key: "{{ user_for_ansible_ssh_key }}"

  - name: add user to sudo group
    tags: always
    user:
      name: "{{ user_for_ansible }}"
      groups: sudo
      append: yes

  - name: allow passwordless sudo for the user
    lineinfile:
      path: /etc/sudoers
      state: present
      regexp: '^{{ user_for_ansible }}'
      line: '{{ user_for_ansible }} ALL=(ALL) NOPASSWD:ALL'
      validate: '/usr/sbin/visudo -cf %s'