- name: Create local dooris group
  become: true
  ansible.builtin.group:
      name: "dooris"
      gid: 10000

- name: Create local dooris user
  become: true
  ansible.builtin.user:
      name: "dooris"
      uid: 10000
      group: "dooris"
      system: true
      password: "!"
      home: "/ansible_docker_compose/state/"
      shell: "/ansible_docker_compose/state/ssh-cli"

- name: Ensure dooris state directory exists and has correct permissions
  become: true
  ansible.builtin.file:
      path: "/ansible_docker_compose/state/"
      owner: "dooris"
      group: "dooris"
      mode: "u=rwx,g=rx,o="

- name: Create ssh server config for dooris user
  become: true
  notify: "reload sshd"
  ansible.builtin.template:
      src: sshd_config
      dest: /etc/ssh/sshd_config.d/dooris.conf
      owner: root
      group: root
      mode: u=rw,g=r,o=r