---
# Example playbook that applies the dangerousthings.authforge role to a
# fleet of headless Ubuntu workstations.
#
# Run from the parent of this `ansible-role/` directory with:
#
#   ansible-playbook -i inventory ansible-role/examples/playbook.yml
#
# (You'll need the role linked into your roles_path, or to install it from
# Galaxy as `dangerousthings.authforge`.)

- name: Roll out AuthForge to engineering workstations
  hosts: workstations
  become: true
  roles:
    - role: dangerousthings.authforge
      vars:
        authforge_install_gui: false
        authforge_stacks:
          sudo:
            mode: required
            methods:
              - fido2
        authforge_storage_backend: per-user
        authforge_firstrun_methods:
          - fido2
        authforge_firstrun_deadline_hours: 72
        authforge_pending_users:
          - user: alice
            methods:
              - fido2