---
- name: Обновить кэш apt
  ansible.builtin.apt:
    update_cache: true
    cache_valid_time: 3600

- name: Базовые пакеты
  ansible.builtin.apt:
    name:
      - curl
      - git
      - acl
      - ca-certificates
      - gnupg
      - software-properties-common
    state: present

- name: Пользователь деплоя
  ansible.builtin.user:
    name: "{{ deploy_user }}"
    shell: /bin/bash
    create_home: true

- name: Каталог .ssh для {{ deploy_user }}
  ansible.builtin.file:
    path: "/home/{{ deploy_user }}/.ssh"
    state: directory
    owner: "{{ deploy_user }}"
    group: "{{ deploy_user }}"
    mode: "0700"

- name: authorized_keys для {{ deploy_user }}
  ansible.builtin.lineinfile:
    path: "/home/{{ deploy_user }}/.ssh/authorized_keys"
    line: "{{ item }}"
    create: true
    mode: "0600"
    owner: "{{ deploy_user }}"
    group: "{{ deploy_user }}"
  loop: "{{ deploy_authorized_keys }}"
  when: deploy_authorized_keys | length > 0

- name: Каталог проекта
  ansible.builtin.file:
    path: "{{ project_path }}"
    state: directory
    owner: "{{ deploy_user }}"
    group: "{{ deploy_user }}"
    mode: "0755"