Update.

roles/common/tasks/main.yml

@@ -165,13 +165,23 @@
     - root-files-scripts
 
 
-# tags supported inside sudoers.yml:
+# tags supported inside sudoers-pc.yml:
 #
 #   sudoers-remove
 #   sudoers-file-configuration
 #   sudoers-global-configuration
-- import_tasks: sudoers.yml
+- import_tasks: sudoers-pc.yml
   when: "groups['client_pc']|string is search(inventory_hostname)"
   tags:
     - sudoers
 
+# tags supported inside sudoers-server.yml:
+#
+#   sudoers-remove
+#   sudoers-file-configuration
+#   sudoers-global-configuration
+- import_tasks: sudoers-server.yml
+  when: "groups['file_server']|string is search(inventory_hostname)"
+  tags:
+    - sudoers
+

roles/common/tasks/pure-ftpd-install.yml

@@ -1,5 +1,14 @@
 ---
 
+# ==========
+#
+# mostly copied from:
+#    https://github.com/gcoop-libre/ansible-role-pure-ftpd
+#
+#    git clone https://github.com/gcoop-libre/ansible-role-pure-ftpd.git
+#
+# ==========
+
 # ---
 # Install PureFTP Daemon
 # ---

roles/common/tasks/sudoers-pc.yml

@@ -1,8 +1,8 @@
 ---
 
-- name: (sudoers.yml) update specific sudoers configuration files (/etc/sudoers.d/)
+- name: (sudoers-pc.yml) update specific sudoers configuration files (/etc/sudoers.d/)
   template:
-    src: etc/sudoers.d/50-user.j2
+    src: etc/sudoers.d/50-user.pc.j2
     dest: /etc/sudoers.d/50-user
     validate: visudo -cf %s
     owner: root
@@ -11,9 +11,9 @@
   tags:
     - sudoers-file-configuration
 
-- name: (sudoers.yml) update global sudoers configuration file
+- name: (sudoers-pc.yml) update global sudoers configuration file
   template:
-    src: etc/sudoers.j2
+    src: etc/sudoers.pc.j2
     dest: /etc/sudoers
     owner: root
     group: root
@@ -22,11 +22,11 @@
   tags:
     - sudoers-global-configuration
 
-- name: (sudoers.yml) Ensure all sudo_users are in sudo group
+- name: (sudoers-pc.yml) Ensure all sudo_users are in sudo group
   user:
     name: "{{ item }}"
     groups: sudo
     append: yes
-  with_items: "{{ sudo_users }}"
+  with_items: "{{ sudo_pc_users }}"
   tags:
     - sudo-users

roles/common/tasks/sudoers-server.yml

@@ -0,0 +1,57 @@
+---
+
+#- name: (sudoers-server.yml) include variables
+#  include_vars: "{{ item }}"
+#  with_first_found:
+#    - "sudoers-{{ inventory_hostname }}.yml"
+#    - "sudoers-{{ ansible_distribution_release }}.yml"
+#    - "sudoers-{{ ansible_distribution | lower }}.yml"
+#    - "sudoers-default.yml"
+#  tags:
+#    - sudoers-remove
+#    - sudoers-file-configuration
+#    - sudoers-global-configuration
+    
+- name: (sudoers-server.yml) Remove user entries in file /etc/sudoers
+  lineinfile:
+    dest: /etc/sudoers
+    state: absent
+    regexp: '^{{ item }}'
+    owner: root
+    group: root
+    mode: 0440
+    validate: visudo -cf %s
+  with_items: '{{ sudoers_server_remove_user }}'
+  tags:
+    - sudoers-remove
+
+- name: (sudoers-server.yml) update specific sudoers configuration files (/etc/sudoers.d/)
+  template:
+    src: etc/sudoers.d/50-user.server.j2
+    dest: /etc/sudoers.d/50-user
+    #validate: visudo -cf %s
+    owner: root
+    group: root
+    mode: 0440
+  tags:
+    - sudoers-file-configuration
+
+- name: (sudoers-server.yml) update global sudoers configuration file
+  template:
+    src: etc/sudoers.server.j2
+    dest: /etc/sudoers
+    owner: root
+    group: root
+    mode: 0440
+    #validate: visudo -cf %s
+  tags:
+    - sudoers-global-configuration
+
+- name: (sudoers-server.yml) Ensure all sudo_users are in sudo group
+  user:
+    name: "{{ item }}"
+    groups: sudo
+    append: yes
+  with_items: "{{ sudo_server_users }}"
+  tags:
+    - sudo-users