ansible/roles/ubuntu/tasks/users.yml

---

- name: "Setup {{ ubuntu_passwordless_sudo_group }} group"
  ansible.builtin.group:
    state: present
    name: "{{ ubuntu_passwordless_sudo_group }}"

- name: "Add {{ ubuntu_passwordless_sudo_group }} group to sudoers"
  lineinfile:
    path: /etc/sudoers
    state: present
    regexp: "^%{{ ubuntu_passwordless_sudo_group }}"
    line: "%{{ ubuntu_passwordless_sudo_group }} ALL=(ALL) NOPASSWD: ALL"
    validate: 'visudo -cf %s'

- name: Setup Groups
  ansible.builtin.group:
    state: present
    name: "{{ item }}"
  loop: "{{ ubuntu_groups }}"

- name: Setup Users
  ansible.builtin.user:
    state: present
    shell: /bin/bash
    name: "{{ item.name }}"
    groups: "{{ item.groups }}"
  loop: "{{ ubuntu_users }}"

- name: Set Authorized ssh key
  ansible.posix.authorized_key:
    state: present
    user: "{{ item.name }}"
    key: "{{ item.ssh_key }}"
  loop: "{{ ubuntu_users }}"