---
- name: Check if robert user exists
  ansible.builtin.command:
    cmd: id -u robert
  register: robert_user
  changed_when: false
  failed_when: false

- name: Create robert user
  user:
    name: robert
    groups: sudo
    append: yes
    shell: /bin/bash
    create_home: yes
    password: "{{ robert_password_hash }}"
  when: robert_user.rc != 0

- name: create ansible user
  user:
    name: ansible
    system: yes

- name: Ensure sudoers directory exists
  ansible.builtin.file:
    path: /etc/sudoers.d
    state: directory
    owner: root
    group: root
    mode: '0750'

- name: copy sudoers_ansible
  copy:
    src: files/sudoers_ansible
    dest: /etc/sudoers.d/ansible
    owner: root
    group: root
    mode: 0440

- name: create backup of .bashrc
  copy:
    src: /home/robert/.bashrc
    dest: /home/robert/.bashrc.old
    owner: robert
    group: robert
    mode: 0600