---

# Creates the deploy user, authorises the deploy key

- name: Create deploy group

  ansible.builtin.group:

    name: "{{ deploy_user }}"

    state: present

- name: Create deploy user

  ansible.builtin.user:

    name: "{{ deploy_user }}"

    group: "{{ deploy_user }}"

    groups: docker

    append: yes

    password: x # XXX: lazy, dumb password, replace with a encrypted vault

    shell: /bin/bash

    create_home: yes

    state: present

- name: Authorise deploy SSH public key

  ansible.posix.authorized_key:

    user: "{{ deploy_user }}"

    state: present

    key: "{{ lookup('file', deploy_ssh_pubkey_file) }}"