user.yml

---

- hosts: server
  become: true
  vars:
    admins:
      - sven
      - lars

  tasks:
    - name: install epel
      package:
        name: epel-release
      when: ansible_os_family == "RedHat"

    - name: install base tools
      package:
        name:
          - vim
          - zsh
          - htop
          - iotop

    - name: create admin users
      user:
        name: '{{ item }}'
        groups: '{% if ansible_os_family == "RedHat"%}wheel{% else %}sudo{% endif %}'
        append: true
      loop: '{{ admins }}'

    - name: set up admin authorized keys
      authorized_key:
        user: '{{ item }}'
        state: present
        key: "{{ lookup('file', 'pub-keys/{{ item }}.pub') }}"
      loop: '{{ admins }}'

    - name: allow to sudo without a password
      copy:
        dest: /etc/sudoers.d/password-less-sudo
        mode: 0600
        content: '%{% if ansible_os_family == "RedHat"%}wheel{% else %}sudo{% endif %} ALL=(ALL) NOPASSWD: ALL'
        force: yes