# This task list sets up the needed users
---
- name: Create users
  become: yes
  become_method: su
  become_user: "root"
  vars:
    ansible_become_pass: root
  block:
    - name: Standard user
      vars:
        username: odroid
      block:
        - name: Create user
          ansible.builtin.user:
            name: "{{ username }}"
            create_home: yes
            append: yes
            groups: wheel, video
            state: present
            password: "{{ username | password_hash('sha512') }}"
            shell: "/bin/bash"
        - name: Add ssh key to odroid
          ansible.posix.authorized_key:
            user: "{{ username }}"
            key: "{{ lookup('file', ansible_ssh_public_key_file) }}"

    - name: autom8 user
      vars:
        username: autom8
      block:
        - name: Create user
          ansible.builtin.user:
            name: "{{ username }}"
            create_home: yes
            state: present

        - name: add SSH key
          ansible.posix.authorized_key:
            user: "{{ username }}"
            state: present
            key: "{{ lookup('file', 'autom8_public_key') }}"
            manage_dir: yes

        - name: allow shutting down
          ansible.builtin.lineinfile:
            path: /etc/sudoers
            state: present
            line: 'ALL ALL=NOPASSWD: /sbin/halt, /sbin/reboot, /sbin/poweroff, /sbin/shutdown now'
            validate: /usr/sbin/visudo -cf %s