oopen-server/roles/common/tasks/webadmin-user.yml

---
# ---
# - webadmin user/group
# ---

- name: (webadmin-user.yml) Ensure webadmin group exists
  ansible.builtin.group:
    name: "{{ item.name }}"
    state: present
    gid: "{{ item.group_id | default(omit) }}"
  with_items: "{{ webadmin_user }}"
  loop_control:
    label: "{{ item.name }}"
  when:
    - inventory_hostname in (groups['webadmin'] | default([]))
    - webadmin_user is defined
    - item.group_id is defined
  tags:
    - webadmin
    - groups-exists

- name: (webadmin-user.yml) Ensure webadmin user exists
  ansible.builtin.user:
    name: "{{ item.name }}"
    state: present
    uid: "{{ item.user_id | default(omit) }}"
    group: "{{ item.name | default(omit) }}"
    home: "{{ item.home | default(omit) }}"
    shell: '{{ item.shell | d("/bin/bash") }}'
    password: "{{ item.password }}"
    update_password: on_create
  with_items: "{{ webadmin_user }}"
  loop_control:
    label: "{{ item.name }}"
  when:
    - inventory_hostname in (groups['webadmin'] | default([]))
    - webadmin_user is defined
  tags:
    - webadmin
    - users-exists

- name: (webadmin-user.yml) Ensure authorized_key files for webadmin user is present
  ansible.posix.authorized_key:
    user: "{{ item.0.name }}"
    key: "{{ item.1 }}"
    state: present
  with_subelements:
    - "{{ webadmin_user }}"
    - ssh_keys
  loop_control:
    label: "{{ item.0.name }} key: {{ idx + 1 }}"
    index_var: idx
  when:
    - inventory_hostname in (groups['webadmin'] | default([]))
    - webadmin_user is defined
  tags:
    - webadmin
    - authorized_key

- name: (webadmin-user.yml) Copy default ed25519 ssh private key to user webadmin
  ansible.builtin.copy:
    src: "{{ item.priv_key_src }}"
    dest: "{{ item.priv_key_dest }}"
    owner: "{{ item.login }}"
    group: "{{ item.login }}"
    mode: "0600"
  # when: groups['oopen_server']|string is search(inventory_hostname)
  when:
    - insert_webadmin_ssh_keypair|bool
  with_items: "{{ webadmin_ssh_keypair }}"
  loop_control:
    label: "dest: {{ item.priv_key_dest }}"
  tags:
    - webadmin
    - webadmin-defaut-ssh-keypair

- name: (webadmin-user.yml) Copy default ssh key ed25519 public key to user webadmin
  ansible.builtin.copy:
    src: "{{ item.pub_key_src }}"
    dest: "{{ item.pub_key_dest }}"
    owner: "{{ item.login }}"
    group: "{{ item.login }}"
    mode: "0644"
  with_items: "{{ webadmin_ssh_keypair }}"
  loop_control:
    label: "dest: {{ item.pub_key_dest }}"
  when:
    - insert_webadmin_ssh_keypair|bool
  tags:
    - webadmin
    - webadmin-defaut-ssh-keypair

- name: (webadmin-user.yml) Ensure .ssh/config of user webadmin is up-to-date
  ansible.builtin.template:
    src: var/www/.ssh/config.j2
    dest: "~webadmin/.ssh/config"
    owner: webadmin
    group: webadmin
    mode: "0644"
  when:
    - insert_webadmin_ssh_keypair|bool
  tags:
    - webadmin
    - webadmin-defaut-ssh-keypair

# devel-repos contains SVN repositiries; webadmin must have ssh access to
# to webadmin at devel-repos to manage SVN repository
#
- name: (webadmin-user.yml) Ensure authorized_key on devel-repos hosts contains public key
  ansible.posix.authorized_key:
    user: "{{ item.login }}"
    key: "{{ lookup('file', item.pub_key_src) }}"
    state: present
  with_items: "{{ webadmin_ssh_keypair }}"
  loop_control:
    label: "authorized_keys - webadmin: root"
  when: inventory_hostname == item.target
  tags:
    - webadmin
    - authorized_key
    - insert_webadmin_ssh_public_key

# ---
# Check if local template directories exists
# ---

- name: (users-systemfiles.yml) Check if local template directory exists for webadmin
  ansible.builtin.stat:
    path: "{{ inventory_dir }}/files/homedirs/{{ item.name }}"
  delegate_to: localhost
  with_items: "{{ webadmin_user }}"
  loop_control:
    label: "{{ item.name }}"
  register: common_local_template_dir_webadmin

# --
# Copy .bashrc
# ---

# - name: (webadmin-user.yml) Check if webadmin's file '.bashrc.ORIG' exists
#   stat:
#     path: "~{{ item.item.name }}/.bashrc.ORIG"
#   register: common_bashrc_webadmin_orig_exists
#   with_items: "{{ common_local_template_dir_webadmin.results }}"
#   loop_control:
#     label: '{{ item.item.name }}'
#   when:
#     - item.stat.exists
#   tags:
#     - webadmin
#     - bash
#
# - name: (webadmin-user.yml) Backup existing webadmin's .bashrc file
#   command: cp ~{{ item.item.item.name }}/.bashrc ~{{ item.item.item.name }}/.bashrc.ORIG
#   loop: "{{ common_bashrc_webadmin_orig_exists.results }}"
#   loop_control:
#     label: '{{ item.item.item.name }}'
#   when:
#     - item.stat.exists
#   tags:
#     - webadmin
#     - bash

- name: (webadmin-user.yml) Check if webadmin's file '.bashrc.ORIG' exists
  ansible.builtin.stat:
    path: "~{{ item.name }}/.bashrc.ORIG"
  register: common_bashrc_webadmin_orig_exists
  with_items: "{{ webadmin_user }}"
  loop_control:
    label: "{{ item.name }}"
  tags:
    - webadmin
    - bash

- name: (webadmin-user.yml) Backup existing webadmin's .bashrc file
  ansible.builtin.command:
    cmd: cp -a ~{{ item.item.name }}/.bashrc ~{{ item.item.name }}/.bashrc.ORIG
    creates: "~{{ item.item.name }}/.bashrc.ORIG"
  loop: "{{ common_bashrc_webadmin_orig_exists.results }}"
  loop_control:
    label: "{{ item.item.name }}"
  tags:
    - webadmin
    - bash

- name: (webadmin-user.yml) copy new .bashrc for webadmin if it exists
  ansible.builtin.copy:
    src: "{{ lookup('fileglob', inventory_dir + '/files/homedirs/' + item.item.name + '/_bashrc') }}"
    dest: "~{{ item.item.name }}/.bashrc"
    owner: "{{ item.item.name }}"
    group: "{{ item.item.name }}"
    mode: "0644"
  with_items: "{{ common_local_template_dir_webadmin.results }}"
  loop_control:
    label: "{{ item.item.name }}"
  when:
    - item.stat.exists
    - lookup('fileglob', inventory_dir + '/files/homedirs/' + item.item.name + '/_bashrc') != ''
  tags:
    - webadmin
    - bash

# --
# Copy .profile
# ---

- name: (webadmin-user.yml) Check if webadmin's file '.profile.ORIG' exists
  ansible.builtin.stat:
    path: "~{{ item.name }}/.profile.ORIG"
  register: common_profile_webadmin_orig_exists
  with_items: "{{ webadmin_user }}"
  loop_control:
    label: "{{ item.name }}"
  tags:
    - webadmin
    - profile

- name: (webadmin-user.yml) Backup existing users .profile file
  ansible.builtin.command:
    cmd: cp -a ~{{ item.item.name }}/.profile ~{{ item.item.name }}/.profile.ORIG
    creates: "~{{ item.item.name }}/.profile.ORIG"
  with_items: "{{ common_profile_webadmin_orig_exists.results }}"
  loop_control:
    label: "{{ item.item.name }}"
  tags:
    - webadmin
    - profile

- name: (webadmin-user.yml) copy .profile for user webadmin if it exists
  ansible.builtin.copy:
    src: "{{ lookup('fileglob', inventory_dir + '/files/homedirs/' + item.item.name + '/_profile') }}"
    dest: "~{{ item.item.name }}/.profile"
    owner: "{{ item.item.name }}"
    group: "{{ item.item.name }}"
    mode: "0644"
  with_items: "{{ common_local_template_dir_webadmin.results }}"
  loop_control:
    label: "{{ item.item.name }}"
  when:
    - item.stat.exists
    - lookup('fileglob', inventory_dir + '/files/homedirs/' + item.item.name + '/_profile') != ''
  tags:
    - webadmin
    - profile

# --
# Copy .vimrc
# ---

- name: (webadmin-user.yml) copy .vimrc for user webadmin if it exists
  ansible.builtin.copy:
    src: "{{ lookup('fileglob', inventory_dir + '/files/homedirs/' + item.item.name + '/_vimrc') }}"
    dest: "~{{ item.item.name }}/.vimrc"
    owner: "{{ item.item.name }}"
    group: "{{ item.item.name }}"
    mode: "0644"
  with_items: "{{ common_local_template_dir_webadmin.results }}"
  loop_control:
    label: "{{ item.item.name }}"
  when:
    - item.stat.exists
    - lookup('fileglob', inventory_dir + '/files/homedirs/' + item.item.name + '/_vimrc') != ''
  tags:
    - webadmin
    - vim

- name: (webadmin-user.yml) Check if local template directory .vim exists for webadmin
  ansible.builtin.stat:
    path: "{{ inventory_dir }}/files/homedirs/webadmin/.vim"
  delegate_to: localhost
  register: common_local_template_dir_vim_webadmin
  with_items: "{{ webadmin_user }}"
  loop_control:
    label: "{{ item.name }}"

- name: (webadmin-user.yml) copy .vim directory for user webadmin if it exists
  ansible.builtin.copy:
    src: "{{ inventory_dir + '/files/homedirs/' + item.item.name + '/.vim' }}"
    dest: "~{{ item.item.name }}"
    owner: "{{ item.item.name }}"
    group: "{{ item.item.name }}"
    mode: "0644"
  with_items: "{{ common_local_template_dir_vim_webadmin.results }}"
  loop_control:
    label: "{{ item.item.name }}"
  when:
    - item.stat.exists
  tags:
    - webadmin
    - vim