Ansible_workstation/roles/user/tasks/main.yml

---
# tasks file for user
# Create user
- name: users -- Ensure wheel group exists
  group:
    name: wheel
    state: present

- name: create users
  ansible.builtin.user:
    name: "{{ user.username }}"
    update_password: on_create
    password: "{{ user.password | password_hash('sha512')}}"
    group: "{{ user.group | default('users') }}"
    groups: "{{ user.groups  | default('') }}"
    shell: "{{ user.shell | default('/bin/bash') }}"
    state: present
    system: "{{ user.system | default('no') }}"

# 
- name: ssh -- Add public key
  authorized_key: 
    user: "{{ user.username }}" 
    key: "{{ lookup('file', item.keyfile) }}"
    state: present
  with_items: "{{ user.public_key }}"
  when: user.public_key

# Dotfiles
- name: Install for arch
  import_tasks: arch.yml
  when: ansible_os_family == "Archlinux"

- name: Install for debian
  import_tasks: debian.yml
  when: ansible_os_family == "Debian"

- name: Clone dotfiles
  ansible.builtin.git:
    repo: "{{ user.config.giturl }}"
    dest: "/home/{{ user.username }}/.dotfiles"

- name: user owns its dotfiles
  ansible.builtin.file:
    path: "/home/{{ user.username }}/.dotfiles"
    owner: "{{ user.username }}"

- name: stow configs
  ansible.builtin.command:
    cmd: stow {{ item }}
    chdir: "/home/{{ user.username }}/.dotfiles"
  with_items: "{{ user.config.stowing }}"