group_vars/all.yml

@@ -27,7 +27,9 @@ users:
   - username: mg
     password: "{{ lookup('viczem.keepass.keepass', 'mg_linux_password_hash', 'password') }}"
     update_password: always
-    groups: ssh, sudo
+    groups:
+      - ssh
+      - sudo
     state: present
     public_ssh_key: "{{ ssh_public_key_mg }}"
     allow_sudo: true
@@ -35,7 +37,9 @@ users:
   - username: ansible-user
     password: "{{ lookup('viczem.keepass.keepass', 'ansible_user_linux_password_hash', 'password') }}"
     update_password: always
-    groups: ssh, sudo
+    groups:
+      - ssh
+      - sudo
     state: present
     public_ssh_key: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJcBwOjanQV6sFWaTetqpl20SVe3aRzGjKbsp7hKkDCE mg@irantu
     allow_sudo: true

roles/mgrote_users/tasks/main.yml

@@ -1,16 +1,10 @@
 ---
-- name: set groups as list
-  ansible.builtin.set_fact:
-    groups_as_list: "{{ (((((groups_as_list | default([]) + item.groups.split(','))) | map('trim')) | list) | sort) | unique }}"
-  loop: '{{ users }}'
-  when: item.groups is defined
-
 - name: create groups
   ansible.builtin.group:
-    name: "{{ item }}"
+    name: "{{ ((item.groups)  | sort) | unique }}"
     state: present
-  loop: "{{ groups_as_list }}"
+  loop: '{{ users }}'
-  when: groups_as_list is defined
+  when: item.groups is defined
 
 - name: create users
   ansible.builtin.user: