---
- name: Vytvor skupiny pro deploy uzivatele
  ansible.builtin.group:
    name: "{{ item }}"
    state: present
  loop: "{{ deploy_groups }}"

- name: Vytvor deploy uzivatele (UID {{ deploy_uid }})
  ansible.builtin.user:
    name: "{{ deploy_user }}"
    uid: "{{ deploy_uid }}"
    group: "{{ deploy_groups[0] }}"
    groups: "{{ deploy_groups | join(',') }}"
    shell: "{{ deploy_shell }}"
    create_home: true
    home: "{{ deploy_home }}"
    password: "!"
    update_password: always
    append: true

- name: Uzamkni heslo deploy uzivatele
  ansible.builtin.command: passwd -l {{ deploy_user }}
  changed_when: false

- name: Vytvor .ssh adresar pro deploy uzivatele
  ansible.builtin.file:
    path: "{{ deploy_home }}/.ssh"
    state: directory
    owner: "{{ deploy_user }}"
    group: "{{ deploy_user }}"
    mode: "0700"

- name: Vytvor authorized_keys soubor
  ansible.builtin.file:
    path: "{{ deploy_home }}/.ssh/authorized_keys"
    state: touch
    owner: "{{ deploy_user }}"
    group: "{{ deploy_user }}"
    mode: "0600"
    modification_time: preserve
    access_time: preserve