---
# task/create_user file for provision_ansible_user
- name: "Create group {{ provision_ansible_user_group }}"
  ansible.builtin.group:
    name: "{{ provision_ansible_user_group }}"
    state: present
    system: "{{ provision_ansible_user_is_system }}"
  become: true

- name: "Create user {{ provision_ansible_user_name }}"
  ansible.builtin.user:
    name: "{{ provision_ansible_user_name }}"
    comment: "Ansible service user"
    password: "{{ provision_ansible_user_password }}"
    group: "{{ provision_ansible_user_group }}"
    home: "{{ provision_ansible_user_home }}"
    shell: "{{ provision_ansible_user_shell }}"
    system: "{{ provision_ansible_user_is_system }}"
    create_home: true
  become: true

- name: "Add user to sudoers"
  community.general.sudoers:
    name: "{{ provision_ansible_user_name }}"
    user: "{{ provision_ansible_user_name }}"
    commands: ALL
    nopassword: true
    setenv: true
  when: provision_ansible_user_sudoer
  become: true