Files
computer-playbook/roles/web-app-semaphore/meta/users.yml
kevinveenbirkenbachandClaude Fable 5 278f9f37d0 feat(web-app-semaphore): source break-glass admin from the users model
The seeded local admin is now the shared-model user
web-app-semaphore-breakglass (login breakglass-administrator, password =
ansible_become_password, accounts: [] so it is never provisioned to
LDAP/Keycloak, forward: administrator so its mail lands in the administrator
mailbox). SEMAPHORE_ADMIN_* read that user via lookup('users'); README and
variant table updated.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-02 12:58:01 +02:00

9 lines
290 B
YAML

---
administrator: {}
web-app-semaphore-breakglass:
username: breakglass-administrator
password: "{{ ansible_become_password }}"
accounts: []
forward: administrator
description: Semaphore local break-glass admin; not provisioned to IAM, mail forwards to the administrator mailbox