ansible/roles/users/tasks/rilla.yml

- name: create group 'rilla'
  group:
    name: rilla
    gid: 1000

- name: create user 'rilla'
  user:
    name: rilla
    uid: 1000
    group: rilla
    home: /home/rilla
    groups:
      - deploy
      - wheel

- name: additional groups to rilla
  user:
    name: rilla
    groups: "{{item}}"
    append: yes
  when: item in ansible_facts.getent_group
  with_items:
    - docker

- name: make sure rilla owns its home
  file:
    state: directory
    path: /home/rilla
    owner: rilla
    group: rilla
    mode: '2755'

- name: set rilla's authorized key
  authorized_key:
    user: rilla
    key: '{{ item }}'
    path: /home/rilla/.ssh/authorized_keys
  with_file:
    - public_keys/yubikey

- name: commit rilla's home to lbu
  lbu:
    include:
      - /home/rilla
      - /home/rilla/.ssh/authorized_keys
    exclude:
      - /home/rilla/.ash_history
  when: ansible_distribution == "Alpine" and use_lbu