/
/
/
1# Required
2my_user_username: yannick
3
4# Optional
5my_user_password: "" # leave empty for no login password; or set a plain text and it will be sha512-hashed
6my_user_primary_group: "{{ my_user_username }}"
7my_user_groups: [] # e.g. ['dialout','docker','video']
8
9# SSH configuration
10edge_device: false # true = do NOT generate keypair, only import public key
11my_user_ssh_public_key: "" # if set, use this directly for authorized_keys
12my_user_github_username: "" # fallback: fetch https://github.com/<user>.keys
13my_user_authorized_keys_state: present
14
15# Keypair generation (non-edge only, if no existing keys)
16my_user_key_type: ed25519
17my_user_key_comment: "{{ my_user_username }}@{{ inventory_hostname }}"
18my_user_key_dir: "/home/{{ my_user_username }}/.ssh"
19my_user_key_name: "id_{{ my_user_key_type }}" # creates id_ed25519 + id_ed25519.pub
20
21# Dotfiles
22dotfiles_repo: "" # e.g. [email protected]:me/dotfiles.git or https://...
23dotfiles_dest: "/home/{{ my_user_username }}/.dotfiles"
24dotfiles_version: HEAD
25dotfiles_install_cmd: "" # e.g. "./install.sh" or "make install"
26dotfiles_run_from: "{{ dotfiles_dest }}"
27dotfiles_enabled: "{{ dotfiles_repo | length > 0 and dotfiles_install_cmd | length > 0 }}"
28
29# Sudo
30my_user_passwordless_sudo: false
31
32# Misc
33ensure_acl: true
34home_mode: "0755"
35
36