Backup authorized keys before nuking

2021-10-16 10:17:45 -04:00 · 2021-10-16 10:17:45 -04:00 · d38e3ba4e0
commit d38e3ba4e0
parent 752a9de6df
1 changed files with 8 additions and 1 deletions
--- a/roles/immortal/tasks/main.yml
+++ b/roles/immortal/tasks/main.yml
@ -65,6 +65,13 @@
  become: yes
  register: users_list 

+- name: Backup all users authorized keys
+  fetch:
+    src: "{{item['dir']}}/.ssh/authorized_keys"
+    dest: "{{ inventory_hostname }}"
+  ignore_errors: yes
+  loop: "{{ users_list.users }}"
+
 - name: Give root exclusively the current controller user's SSH key
  ansible.posix.authorized_key:
    user: root