---
- name: Create jarvis group
  ansible.builtin.group:
    name: "{{ jarvis_group }}"
    state: present
    system: false

- name: Create jarvis user
  ansible.builtin.user:
    name: "{{ jarvis_user }}"
    group: "{{ jarvis_group }}"
    shell: "{{ jarvis_shell }}"
    create_home: true
    state: present

- name: Deploy SSH public key
  ansible.posix.authorized_key:
    user: "{{ jarvis_user }}"
    key: "{{ lookup('file', '~/.ssh/id_jarvis.pub') }}"
    state: present
    exclusive: true

- name: Grant passwordless sudo
  ansible.builtin.copy:
    dest: "/etc/sudoers.d/{{ jarvis_user }}"
    content: "{{ jarvis_user }} ALL=(ALL) NOPASSWD:ALL\n"
    owner: root
    group: root
    mode: '0440'
  when: jarvis_sudo_nopasswd | bool