mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 10:59:59 +00:00
The seeded local admin is now the shared-model user
web-app-semaphore-breakglass (login breakglass-administrator, password =
ansible_become_password, accounts: [] so it is never provisioned to
LDAP/Keycloak, forward: administrator so its mail lands in the administrator
mailbox). SEMAPHORE_ADMIN_* read that user via lookup('users'); README and
variant table updated.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
9 lines
290 B
YAML
9 lines
290 B
YAML
---
|
|
administrator: {}
|
|
web-app-semaphore-breakglass:
|
|
username: breakglass-administrator
|
|
password: "{{ ansible_become_password }}"
|
|
accounts: []
|
|
forward: administrator
|
|
description: Semaphore local break-glass admin; not provisioned to IAM, mail forwards to the administrator mailbox
|