---
- name: Ensure repository exists
  ansible.builtin.apt_repository:
    repo: "{{ lldap_repo_url }}"
    state: present
    filename: lldap

- name: Ensure package is installed
  ansible.builtin.apt:
    name: lldap
    update_cache: yes

- name: Ensure config is templated
  ansible.builtin.template:
    src: lldap_config.toml.j2
    dest: /etc/lldap/lldap_config.toml
    owner: lldap
    group: lldap
    mode: "0644"

- name: Ensure services are enabled and started
  become: true
  ansible.builtin.systemd:
    name: lldap.service
    masked: false
    enabled: true
    started: true
...