From eb3ceb082be2cd08fa94e46994f871e7c5135609 Mon Sep 17 00:00:00 2001
From: Kuba Orlik <kontakt@kuba-orlik.name>
Date: Fri, 26 Mar 2021 22:27:14 +0100
Subject: [PATCH] Ensure that the user on rpi has a password

---
 backup.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/backup.yml b/backup.yml
index f6526a8..3cd91c1 100644
--- a/backup.yml
+++ b/backup.yml
@@ -115,9 +115,15 @@
         name: openvpn-client@{{SERVER_NAME}}
         state: restarted
         enabled: yes
+
+    - name: generate disposable user password
+      shell: dd if=/dev/urandom count=100 | md5sum
+      register: user_password
+
     - name: Add the backup user
       ansible.builtin.user:
         name: "{{SERVER_NAME}}-backup"
+        password: "{{user_password.stdout | password_hash('sha512')}}"
 
     - name: set permissions on backup dir
       file: