diff --git a/roles/native-user-administrator/Readme.md b/roles/native-user-administrator/Readme.md index aff009ca..65cbed68 100644 --- a/roles/native-user-administrator/Readme.md +++ b/roles/native-user-administrator/Readme.md @@ -1,4 +1,6 @@ # Role Administrator This role creates an standard administrator user. -This user needs to type in his password before executing sudo. +This user needs to type in his password before executing sudo. For security reasons it's recommended to use this user instead of the standard root user. +This user should not be used to login to other systems. It's just there to let administration tasks run. +For this reason no ssh-keys are generated. diff --git a/roles/native-user-administrator/tasks/main.yml b/roles/native-user-administrator/tasks/main.yml index aa1a0056..add46de5 100644 --- a/roles/native-user-administrator/tasks/main.yml +++ b/roles/native-user-administrator/tasks/main.yml @@ -1,9 +1,6 @@ - name: create administrator user: name: administrator - generate_ssh_key: yes - ssh_key_bits: 4096 - ssh_key_file: .ssh/id_rsa update_password: on_create password: "{{ user_administrator_initial_password | password_hash('sha512') }}"