add variable for plain users

Author: thorinaboenke

defaults/main.yml

@@ -61,11 +61,12 @@ attackmate_api_server_url: "https://github.com/ait-testbed/attackmate-api-server
 attackmate_api_server_version: "main"
 attackmate_api_server_dest: "{{ attackmate_shared_dir }}/attackmate-api-server"
 
-attackmate_api_logs_to_disk: "False"
+attackmate_api_logs_to_disk: False
 attackmate_api_log_dir: "/var/log/attackmate-api"
 
 attackmate_api_bin_path: "/usr/local/bin/attackmate-api"
 attackmate_api_service_path: "/etc/systemd/system/attackmate-api.service"
 attackmate_ssl_key_path: "/etc/ssl/private/attackmate.key"
 attackmate_ssl_cert_path: "/etc/ssl/certs/attackmate.pem"
 attackmate_api_server_port: 8445
+attackmate_api_plain_users: {}

tasks/api_server.yml

@@ -111,6 +111,34 @@
     - { path: "{{ attackmate_ssl_key_path }}", mode: '0640' }
     - { path: "{{ attackmate_ssl_cert_path }}", mode: '0644' }
 
+# --- User hashes for .env file (Optional) ---
+
+- name: Install argon2-cffi for hash generation
+  ansible.builtin.pip:
+    name: argon2-cffi
+    state: present
+  delegate_to: localhost
+  become: false
+  when: attackmate_api_plain_users | length > 0
+
+- name: Generate argon2 hashes for API users
+  ansible.builtin.shell:
+    cmd: "python3 -c \"from argon2 import PasswordHasher; ph = PasswordHasher(); print(ph.hash('{{ item.value }}'))\""
+  loop: "{{ attackmate_api_plain_users | dict2items }}"
+  register: argon2_hashes
+  changed_when: false
+  delegate_to: localhost
+  become: false
+  #no_log: true
+  when: attackmate_api_plain_users | length > 0
+
+- name: Build USERS json string
+  ansible.builtin.set_fact:
+    attackmate_api_users: >-
+      {{ dict(argon2_hashes.results | map(attribute='item.key') |
+      zip(argon2_hashes.results | map(attribute='stdout'))) | to_json }}
+  #no_log: true
+  when: attackmate_api_plain_users | length > 0
 
 # --- Env file ---