create_users_groups.yml

---
#  - name: DEBUG output
#    debug:
#      msg: "Key: {{ item.key }}, Values: {{ item.value }}END"
#      verbosity: 1
#    with_dict: "{{ mygroups }}"
#    tags: [ users ]
#  - name: DEBUG output
#    debug:
#      msg: "{{ item }}END"
#      verbosity: 1
#    with_dict: "{{ users }}"

- name: create groups
  group:
    name: "{{ item.name }}"
    gid: "{{ item.gid }}"
    state: "{{ item.state | default('present') }}"
  loop: "{{ vault_groups | flatten(levels=1) }}"

# do NOT run this before skel configuration has been rolled out!
#  - name: create individual primary user group
#    group:
#      name: "{{ item.key }}"
#      state: present
#      gid: "{{ item.value.uid }}"
#    with_dict: "{{ users }}"

- name: create users
  user:
    comment: "{{ item.value.comment | default(omit) }}"
    create_home: "{{ item.value.create_home | default ('yes') }}"
    generate_ssh_key: "{{ item.value.generate_ssh_key | default(omit) }}"
    group: "{{ item.key | default(omit) }}"
    groups: "{{ item.value.groups | default(omit) }}"
    home: "/home/{{ item.key }}/"
    name: "{{ item.key }}"
    password: "{{ item.value.password | default(omit) }}"
    shell: "{{ item.value.shell | default(omit) }}"
    state: "{{ item.value.state | default('present') }}"
    uid: "{{ item.value.uid | default(omit) }}"
    update_password: "on_create"
  with_dict: "{{ vault_users }}"

- name: overwrite defective vimrc. skel files
  copy:
    src: "/etc/skel/.vimrc"
    dest: "/home/{{ item.key }}/.vimrc"
    remote_src: "yes"
  with_dict: "{{ vault_users }}"