diff options
Diffstat (limited to 'soju/tasks/main.yaml')
| -rw-r--r-- | soju/tasks/main.yaml | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/soju/tasks/main.yaml b/soju/tasks/main.yaml index 742a665..cdc9ad4 100644 --- a/soju/tasks/main.yaml +++ b/soju/tasks/main.yaml @@ -72,12 +72,15 @@ failed_when: soju_create_user.rc != 0 and 'duplicate key' not in soju_create_user.stderr no_log: true +# Gated: an unconditional reset re-keys the account on every run, clobbering +# any password changed in-band and locking out logged-in clients. - name: update soju admin password become: yes become_user: "{{soju_user}}" shell: "echo '{{soju_admin_password}}' | sojudb -config /etc/soju/config change-password {{soju_admin_user}}" - changed_when: false + changed_when: true no_log: true + when: soju_reset_password | default(false) | bool - name: install nginx stream config become: yes |