#!/bin/bash

groupadd -g 3003 ansible
useradd -g 3003 -u 994 -m -r ansible
usermod -aG ansible vst

mkdir /home/ansible/.ssh
cat << EOL > /home/ansible/.ssh/authorized_keys
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMuxBznuFNFztZt1MbuDRdww7LdmWq0dpK7F3Is/gMPO ansible@semaphore
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMqPCol1eSm4vrAYK0XEaq05n6BAQqQVJOAWhRItfZRS vst@yuuki
EOL

chown -R ansible: /home/ansible/.ssh
chmod 400 /home/ansible/.ssh/authorized_keys

cat << EOL > /etc/sudoers.d/ansible
%ansible         ALL = (ALL) NOPASSWD: ALL
EOL