---
- name: ensure group exists
  become: true
  ansible.builtin.group:
    name: "{{ sanoid_user_group }}"
    state: present
  when:
    - sanoid_user_group is defined
    - sanoid_user is defined

- name: ensure user exists
  become: true
  ansible.builtin.user:
    name: "{{ sanoid_user }}"
    group: "{{ sanoid_user_group }}"
    create_home: true
  when:
    - sanoid_user_group is defined
    - sanoid_user is defined

- name: Ensure user is added to sudoers
  become: true
  community.general.sudoers:
    name: "users-sudo-{{ sanoid_user }}"
    state: present
    user: "{{ sanoid_user }}"
    commands: ALL
    nopassword: true
  when:
    - sanoid_syncoid_destination_host