2
2
# vim: ft=yaml
3
3
---
4
4
users-formula :
5
- use_vim_formula : True
5
+ use_vim_formula : true
6
6
lookup : # override the defauls in map.jinja
7
7
root_group : root
8
8
@@ -11,19 +11,19 @@ groups:
11
11
foo :
12
12
state : present
13
13
gid : 1500
14
- system : False
14
+ system : false
15
15
badguys :
16
- absent : True
16
+ absent : true
17
17
niceguys :
18
18
gid : 4242
19
- system : False
19
+ system : false
20
20
addusers : root
21
21
delusers : toor
22
22
ssl-cert :
23
- system : True
23
+ system : true
24
24
members :
25
- - www-data
26
- - openldap
25
+ - www-data
26
+ - openldap
27
27
28
28
users :
29
29
# # Minimal required pillar values
@@ -34,29 +34,29 @@ users:
34
34
buser :
35
35
fullname : B User
36
36
password : $6$w.............
37
- enforce_password : True
38
- # WARNING: If 'empty_password' is set to True , the 'password' statement
37
+ enforce_password : true
38
+ # WARNING: If 'empty_password' is set to true , the 'password' statement
39
39
# will be ignored by enabling password-less login for the user.
40
- empty_password : False
41
- hash_password : False
42
- system : False
40
+ empty_password : false
41
+ hash_password : false
42
+ system : false
43
43
home : /custom/buser
44
44
homedir_owner : buser
45
45
homedir_group : primarygroup
46
46
user_dir_mode : 750
47
- createhome : True
47
+ createhome : true
48
48
roomnumber : " A-1"
49
49
workphone : " (555) 555-5555"
50
50
homephone : " (555) 555-5551"
51
- manage_vimrc : False
52
- allow_gid_change : False
53
- manage_bashrc : False
54
- manage_profile : False
51
+ manage_vimrc : false
52
+ allow_gid_change : false
53
+ manage_bashrc : false
54
+ manage_profile : false
55
55
expire : 16426
56
56
# Disables user management except sudo rules.
57
57
# Useful for setting sudo rules for system accounts created by package instalation
58
- sudoonly : False
59
- sudouser : True
58
+ sudoonly : false
59
+ sudouser : true
60
60
# sudo_rules doesn't need the username as a prefix for the rule
61
61
# this is added automatically by the formula.
62
62
# ----------------------------------------------------------------------
70
70
sudo_defaults :
71
71
- ' !requiretty'
72
72
# enable polkitadmin to make user an AdminIdentity for polkit
73
- polkitadmin : True
73
+ polkitadmin : true
74
74
shell : /bin/bash
75
- remove_groups : False
75
+ remove_groups : false
76
76
prime_group :
77
77
name : primarygroup
78
78
gid : 1501
@@ -82,10 +82,10 @@ users:
82
82
- some_groups_that_might
83
83
- not_exist_on_all_minions
84
84
ssh_key_type : rsa
85
- # You can inline the private keys ...
86
85
ssh_keys :
87
- privkey : PRIVATEKEY
88
- pubkey : PUBLICKEY
86
+ # You can inline the private keys ...
87
+ # privkey: PRIVATEKEY
88
+ # pubkey: PUBLICKEY
89
89
# or you can provide path to key on Salt fileserver
90
90
privkey : salt://path_to_PRIVATEKEY
91
91
pubkey : salt://path_to_PUBLICKEY
@@ -114,15 +114,15 @@ users:
114
114
ssh_auth_sources :
115
115
- salt://keys/buser.id_rsa.pub
116
116
ssh_auth_sources.absent :
117
- - salt://keys/deleteduser.id_rsa.pub # PUBLICKEY_FILE_TO_BE_REMOVED
117
+ - salt://keys/deleteduser.id_rsa.pub # PUBLICKEY_FILE_TO_BE_REMOVED
118
118
# Manage the ~/.ssh/config file
119
119
ssh_known_hosts :
120
120
importanthost :
121
121
port : 22
122
122
fingerprint : 16:27:ac:a5:76:28:2d:36:63:1b:56:4d:eb:df:a6:48
123
123
key : PUBLICKEY
124
124
enc : ssh-rsa
125
- hash_known_hosts : True
125
+ hash_known_hosts : true
126
126
timeout : 5
127
127
fingerprint_hash_type : sha256
128
128
ssh_known_hosts.absent :
@@ -150,7 +150,7 @@ users:
150
150
- push.default
151
151
- color\..+
152
152
153
- google_2fa : True
153
+ google_2fa : true
154
154
google_auth :
155
155
sshd : |
156
156
SOMEGAUTHHASHVAL
@@ -163,31 +163,33 @@ users:
163
163
33333333
164
164
44444444
165
165
55555555
166
- # unique: True allows user to have non unique uid
167
- unique : False
166
+ # unique: true allows user to have non unique uid
167
+ unique : false
168
168
uid : 1001
169
169
170
170
user_files :
171
- enabled : True
172
- # 'source' allows you to define an arbitrary directory to sync, useful to use for default files.
171
+ enabled : true
172
+ # 'source' allows you to define an arbitrary directory to sync,
173
+ # useful to use for default files.
173
174
# should be a salt fileserver path either with or without 'salt://'
174
175
# if not present, it defaults to 'salt://users/files/user/<username>
175
176
source : users/files
176
177
# template: jinja
177
- # You can specify octal mode for files and symlinks that will be copied. Since version 2016.11.0
178
- # it's possible to use 'keep' for file_mode, to preserve file original mode, thus you can save
179
- # execution bit for example.
178
+ # You can specify octal mode for files and symlinks that will be copied.
179
+ # Since version 2016.11.0 it's possible to use 'keep' for file_mode,
180
+ # to preserve file original mode, thus you can save execution bit for example.
180
181
file_mode : keep
181
- # You can specify octal mode for directories as well. This won't work on Windows minions
182
+ # You can specify octal mode for directories as well.
183
+ # This won't work on Windows minions
182
184
# dir_mode: 775
183
185
sym_mode : 640
184
186
exclude_pat : " *.gitignore"
185
187
186
188
# # Absent user
187
189
cuser :
188
- absent : True
189
- purge : True
190
- force : True
190
+ absent : true
191
+ purge : true
192
+ force : true
191
193
192
194
193
195
# # Old syntax of absent_users still supported
0 commit comments