name: "{{ item.name }}"

    gid: "{{ item.uid | default(omit) }}"

    state: present

  with_items: "{{ os_users }}"

- name: Set-up operating system users

  ansible.builtin.user:

    name: "{{ item.name }}"

    uid: "{{ item.uid | default(omit) }}"

    group: "{{ item.name }}"

    groups: "{{ ','.join(item.additional_groups | default([])) }}"

    append: true

    state: present

    password: "{{ item.password | default('!') }}"

    update_password: on_create

  with_items: "{{ os_users }}"

- name: Set-up authorised keys

  ansible.posix.authorized_key:

    user: "{{ item.0.name }}"

    key: "{{ item.1 }}"

  with_subelements:

    - "{{ os_users | selectattr('authorized_keys', 'defined') | list }}"

    - authorized_keys

- name: Create PHP website group

  ansible.builtin.group:

    name: "{{ user }}"

    gid: "{{ uid | default(omit) }}"

    state: present

- name: Create PHP website admin user

  ansible.builtin.user:

    name: "{{ admin }}"

    uid: "{{ admin_uid | default(omit) }}"

    group: "{{ user }}"

    createhome: true

    home: "{{ home }}"

    state: present

- name: Set-up directory for storing user profile configuration files

  ansible.builtin.file:

    path: "{{ home }}/.profile.d"

    state: directory

    owner: "{{ admin }}"

    group: "{{ user }}"

    mode: "0750"

  ansible.builtin.user:

    name: "{{ user }}"

    uid: "{{ uid | default(omit) }}"

    group: "{{ user }}"

    comment: "umask=0007"

    system: true

    createhome: false

    state: present

    home: "{{ home }}"

    # This is a workaround for a rather stupid bug that Debian seems

    # uninterested to backport -

    # https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=865762

- name: Add nginx user to website group

  ansible.builtin.user:

    name: "www-data"

    groups: "{{ user }}"

    append: "yes"

  notify:

    - Restart nginx

# Ownership set to root so Postfix would not check if correct user owns the

# file.

- name: Set-up forwarding for mails delivered to local application user/admin

- name: Create WSGI website group

  ansible.builtin.group:

    name: "{{ user }}"

    gid: "{{ uid | default(omit) }}"

    state: present

- name: Create WSGI website admin user

  ansible.builtin.user:

    name: "{{ admin }}"

    uid: "{{ admin_uid | default(omit) }}"

    group: "{{ user }}"

    createhome: true

    home: "{{ home }}"

    state: present

- name: Set-up directory for storing user profile configuration files

  ansible.builtin.file:

    path: "{{ home }}/.profile.d"

    state: directory

    owner: "{{ admin }}"

    group: "{{ user }}"

    mode: "0750"

  ansible.builtin.user:

    name: "{{ user }}"

    uid: "{{ uid | default(omit) }}"

    group: "{{ user }}"

    comment: "umask=0007"

    system: true

    createhome: false

    state: present

    home: "{{ home }}"

    # This is a workaround for a rather stupid bug that Debian seems

    # uninterested to backport -

    # https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=865762

- name: Add nginx user to website group

  ansible.builtin.user:

    name: www-data

    groups: "{{ user }}"

    append: true

  notify:

    - Restart nginx

# Ownership set to root so Postfix would not check if correct user owns the

# file.

- name: Set-up forwarding for mails delivered to local application user/admin

        name: go-sendxmpp

        state: present

    - name: Create dedicated group for testing

      ansible.builtin.group:

        name: user

        state: present

    - name: Create dedicated user for testing

      ansible.builtin.user:

        name: user

        group: user

    - name: Deploy mcabber configuration files

      ansible.builtin.template:

        src: tests/data/mcabber.cfg.j2

        dest: "~user/{{ item.jid }}.cfg"

        owner: user

        group: user

        mode: "0600"

      with_items:

        - jid: john.doe@domain1

          password: johnpassword

          server: domain1