user: changing user home directory mode to 750

security: add uwf package

roles/bootstrap/tasks/secure.yml

@@ -13,6 +13,9 @@
 - name: Delete /etc/sudoers.d/ files
   action: shell rm -f /etc/sudoers.d/*
 
+- name: Install packages
+  action: apt pkg=ufw state=installed
+
 - name: Setup ufw 22/tcp
   action: shell ufw allow 22/tcp
 

roles/user/tasks/main.yml

@@ -2,6 +2,9 @@
 - name: Add or update user and set password
   action: user name={{ username }} password={{ password }} shell=/bin/bash
 
+- name: Change user directory permissions to 750
+  file: path=/home/{{ username }} state=directory mode=750
+
 - name: Add or udpate authorized key
   action: authorized_key user={{ username }} key="{{ lookup('file', id_rsa_path) }}"
   when: id_rsa_path is defined