---
- name: Create Rollout User
  hosts: icingaserver
  remote_user: root
  #become: true
  tags: server

  tasks:

    # - name: Create new user
    #   ansible.builtin.user:
    #     name: "{{ rollout_user_name }}"
    #     home: "/home/{{ rollout_user_name }}"
    - name: Create .ssh folder
      ansible.builtin.file:
        path: "~{{ rollout_user_name }}/.ssh"
        state: directory
        owner: "{{ rollout_user_name }}"
        group: "{{ rollout_user_name }}"
        mode: "0700"
    - name: Upload private key
      ansible.builtin.template:
        src: templates/id_ed25519.j2
        dest: "~{{ rollout_user_name }}/.ssh/id_ed25519"
        owner: "{{ rollout_user_name }}"
        group: "{{ rollout_user_name }}"
        mode: "0700"
    - name: Upload public key
      ansible.builtin.template:
        src: templates/id_ed25519.pub.j2
        dest: "~{{ rollout_user_name }}/.ssh/id_ed25519.pub"
        owner: "{{ rollout_user_name }}"
        group: "{{ rollout_user_name }}"
        mode: "0700"
    - name: Create ssh config file
      ansible.builtin.template:
        src: templates/config.j2
        dest: "~{{ rollout_user_name }}/.ssh/config"
        owner: "{{ rollout_user_name }}"
        group: "{{ rollout_user_name }}"
        mode: "0400"