From 35503d6cbd09cbe6a4cc4f40f0ee707622056d78 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Torma=20Krist=C3=B3f?= <tormakristof@tormakristof.eu>
Date: Sat, 16 Apr 2022 20:55:19 +0200
Subject: [PATCH] backupuser

---
 backup.yaml                      |  1 +
 roles/backuphost/tasks/main.yaml | 14 ++++++++++++++
 2 files changed, 15 insertions(+)
 create mode 100644 roles/backuphost/tasks/main.yaml

diff --git a/backup.yaml b/backup.yaml
index 036a1c3..da5150e 100644
--- a/backup.yaml
+++ b/backup.yaml
@@ -6,4 +6,5 @@
     - common
     - internalsmtp
     - backupscript
+    - backuphost
 ...
diff --git a/roles/backuphost/tasks/main.yaml b/roles/backuphost/tasks/main.yaml
new file mode 100644
index 0000000..07dd62c
--- /dev/null
+++ b/roles/backuphost/tasks/main.yaml
@@ -0,0 +1,14 @@
+---
+- name: "Add backup user"
+  ansible.builtin.user:
+    name: backup
+    comment: Backup user
+    shell: /bin/bash
+
+- name: "Dsiable service user"
+  ansible.builtin.user:
+    name: service-user
+    state: present
+    password_lock: true
+    shell: "/sbin/nologin"
+...