ansible/roles/base_user/tasks/main.yml

- name: Add {{ base_user }} group
  include_role:
    name: add_group
  vars:
    add_group_groups: "{{ base_user }}"
- name: Add {{ base_user }} user
  user:
    uid: "{{ posix_uids[ base_user ] }}"
    name: "{{ base_user }}"
    comment: "{{ base_user_name }}"
    shell: "{{ base_user_shell }}"
    group: "{{ base_user }}"
    groups: "{{ base_user_groups }}"
    append: true

- name: Enable sudo access
  lineinfile:
    path: /etc/sudoers.d/10-base_users
    line: "{{ base_user }} ALL=(ALL) NOPASSWD:ALL"
    create: yes
    mode: '0440'
    owner: root
    group: root

- name: Set {{ base_user }} keypairs
  ansible.posix.authorized_key:
    user: "{{ base_user }}"
    state: present
    key: '{{ item }}'
  with_file: "{{ base_user_keylist }}"

- name: Set ubuntu keypairs
  ansible.posix.authorized_key:
    user: "{{ base_user_os }}"
    state: present
    key: '{{ item }}'
  with_file: "{{ base_user_key }}"

- name: Install .bashrc
  copy:
    src: "{{ base_user_rc }}"
    dest: "/home/{{ base_user }}/.bashrc"
    owner: "{{ base_user }}"
    group: "{{ base_user }}"
    mode: '0644'