diff options
| -rw-r--r-- | roles/lacme/files/etc/lacme/lacme.conf | 2 | ||||
| -rw-r--r-- | roles/lacme/tasks/main.yml | 6 |
2 files changed, 4 insertions, 4 deletions
diff --git a/roles/lacme/files/etc/lacme/lacme.conf b/roles/lacme/files/etc/lacme/lacme.conf index b49c87a..3dc06d1 100644 --- a/roles/lacme/files/etc/lacme/lacme.conf +++ b/roles/lacme/files/etc/lacme/lacme.conf @@ -21,7 +21,7 @@ # username to drop privileges to (setting both effective and real uid). # Preserve root privileges if the value is empty (not recommended). # -user = _lacme +user = _lacme-client # groupname to drop privileges to (setting both effective and real gid, # and also setting the list of supplementary gids to that single group). diff --git a/roles/lacme/tasks/main.yml b/roles/lacme/tasks/main.yml index 5ae2597..36e534d 100644 --- a/roles/lacme/tasks/main.yml +++ b/roles/lacme/tasks/main.yml @@ -5,13 +5,13 @@ - liblwp-protocol-https-perl - lacme -- name: Create '_lacme' user - user: name=_lacme system=yes +- name: Create '_lacme-client' user + user: name=_lacme-client system=yes group=nogroup createhome=no home=/nonexistent shell=/usr/sbin/nologin - password=! + password=* state=present - name: Copy lacme/lacme-certs.conf |