407e71072d
README walks through what the role does, every default, and how to invoke it from a parent playbook. examples/playbook.yml is a runnable copy that targets a `workstations` group with a sudo=required+fido2 stack and one pending user. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
32 lines
916 B
YAML
32 lines
916 B
YAML
---
|
|
# Example playbook that applies the dangerousthings.authforge role to a
|
|
# fleet of headless Ubuntu workstations.
|
|
#
|
|
# Run from the parent of this `ansible-role/` directory with:
|
|
#
|
|
# ansible-playbook -i inventory ansible-role/examples/playbook.yml
|
|
#
|
|
# (You'll need the role linked into your roles_path, or to install it from
|
|
# Galaxy as `dangerousthings.authforge`.)
|
|
|
|
- name: Roll out AuthForge to engineering workstations
|
|
hosts: workstations
|
|
become: true
|
|
roles:
|
|
- role: dangerousthings.authforge
|
|
vars:
|
|
authforge_install_gui: false
|
|
authforge_stacks:
|
|
sudo:
|
|
mode: required
|
|
methods:
|
|
- fido2
|
|
authforge_storage_backend: per-user
|
|
authforge_firstrun_methods:
|
|
- fido2
|
|
authforge_firstrun_deadline_hours: 72
|
|
authforge_pending_users:
|
|
- user: alice
|
|
methods:
|
|
- fido2
|