- name: Prérequis Package sudo
  apt:
    name: sudo
    state: present
    update_cache: true
    cache_valid_time: 3600
  tags: sudo
- name: Groupe Admin
  group:
    name: "{{ common_admin_group }}"
  tags: admin
- name: sudo passwordless
  copy:
    content: "%{{ common_admin_group }} ALL=(ALL:ALL) NOPASSWD: ALL"
    dest: /etc/sudoers.d/ansible
    owner: root
    group: root
    mode: 0600
  tags: sanspwd
- name: Utilisateurs "admin" à créer
  user:
    name: "{{ item }}"
    state: present
    group: "{{ common_admin_group }}"
    shell: /bin/bash
  loop: "{{ common_admins }}"
  tags: users
- name: Clés SSH des utilisateurs
  authorized_key:
    user: "{{ item | basename | splitext | first }}"
    key: "{{ lookup('file', item) }}"
  when: "item | basename | splitext | first in common_admins"
  loop: "{{ lookup('fileglob', 'sshkeys/*.pub', wantlist=True) }}"
  tags: keys