From e173b81f7920b1ee2171221f7853841bda8ae22b Mon Sep 17 00:00:00 2001
From: Jim Martens <github@2martens.de>
Date: Sat, 4 Jan 2020 11:51:27 +0100
Subject: [PATCH] Lock root password

---
 initial-setup.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/initial-setup.yml b/initial-setup.yml
index 0bb1c31..ca4e2b0 100644
--- a/initial-setup.yml
+++ b/initial-setup.yml
@@ -15,10 +15,6 @@
       apt:
         upgrade: dist
       register: upgrade
-    - name: updates password of root user
-      user:
-        name: root
-        password: {{ new_root_pw | password_hash('sha512') }}
     - name: create ssh login user
       user:
         name: {{ ssh_user }}
@@ -67,3 +63,7 @@
           service:
             name: ssh
             state: restarted
+    - name: lock root password
+      user:
+        name: root
+        password_lock: yes