set strong password for root

2025-10-07 15:51:34 +02:00
parent f38eeed748
commit ab9d723eae
3 changed files with 59 additions and 43 deletions
--- a/roles/bastionhost/tasks/users/root.yml
+++ b/roles/bastionhost/tasks/users/root.yml
@@ -0,0 +1,6 @@
+# in z.B. roles/bastionhost/tasks/system_setup/user_hardening.yml
+- name: Bastionhost | User Hardening | Set a strong root password from vault
+  ansible.builtin.user:
+    name: root
+    password: "{{ root_password_hash }}"
+  when: root_password_hash is defined