debops.root_account default variables

General configuration

root_account__enable

Whether to manage the root account.

root_account__enabled: True
root_account__password

Password set on root account, saved in secrets

root_account__password: '{{ lookup("password", secret
                            + "/credentials/" + inventory_hostname
                            + "/root_account/password encrypt=sha512_crypt length="
                            + root_account__password_length) }}'
root_account__password_length

Length of the root password.

root_account__password_length: '32'
root_account__password_update

This variable controls if the role should update the root account password on each run. By default it will be updated only the first time the role is executed. If you want to update the password on each run, set this variable to True.

root_account__password_update: '{{ False
                                   if (ansible_local|d() and ansible_local.root_account|d() and
                                       ansible_local.root_account.configured|d())
                                   else True }}'
root_account__generate_ssh_key

Whether to generate a SSH key pair for root.

root_account__generate_ssh_key: True
root_account__ssh_key_type

Specify the SSH private key type to use. By default role will generate ED25519 keys if they are supported by the remote host, otherwise RSA keys will be generated.

root_account__ssh_key_type: '{{ "ed25519"
                                if ("ssh-ed25519" in root_account__register_key_types.stdout_lines)
                                else "rsa" }}'
root_account__ssh_key_file

Absolute path to the SSH private key to manage.

root_account__ssh_key_file: '/root/.ssh/id_{{ root_account__ssh_key_type }}'
root_account__ssh_key_comment

Custom comment added to the generated SSH public key.

root_account__ssh_key_comment: 'root@{{ ansible_hostname }} generated by Ansible'
root_account__ssh_key_bits

Specifies the number of bits in the key to create, only relevant for RSA keys.

root_account__ssh_key_bits: '4096'
root_account__shell

Default root shell, set to empty string to not change the shell.

root_account__shell: ''