add secrets

roles/pwgen/tasks/main.yaml

@@ -11,6 +11,9 @@
 - include_tasks: passwords.yaml
   loop: "{{ default_accounts }}"
 
+- include_tasks: secrets.yaml
+  loop: "{{ secret_keys }}"
+
 - include_tasks: htpasswd.yaml
   loop: "{{ htpasswd_accounts }}"
 

roles/pwgen/tasks/secrets.yaml

@@ -0,0 +1,20 @@
+- name: Test if secret exists in file for {{ item.name }}
+  shell: grep -c "^{{ item.name }}_secret" "{{ inventory_dir }}/group_vars/all/passwords.yaml" || true
+  register: secret_test_grep
+  
+- name: Create secret for {{ item.name }}
+  shell: "openssl rand -hex 32"
+  register: secret
+  when: secret_test_grep.stdout == '0'
+
+- name: Show secret json for {{ item.name }}
+  debug:
+    msg: "{{ secret }}"
+    verbosity: 2
+  when: secret_test_grep.stdout == '0'
+
+- name: Write secret for {{ item.name }}
+  lineinfile:
+    path: "{{ inventory_dir }}/group_vars/all/passwords.yaml"
+    line: "{{ item.name }}_secret: \"{{ secret.stdout }}\""
+  when: secret_test_grep.stdout == '0'