--- - name: Add needed groups group: name: "{{ item }}" with_items: - di-config - name: Add di user user: name=di shell=/bin/false state=present createhome=no system=yes group=di groups=di,di-config - name: Ensure di-sms-reader is present apt: name: "{{ item }}" state: latest update_cache: yes cache_valid_time: 3600 with_items: - "di-sms-reader" - name: Restrict /etc/di directory file: path: "/etc/di" owner: "root" group: "di-config" mode: "0750" state: directory - name: Template di-sms-reader config template: src: "sms-reader.conf.j2" dest: "{{ di_sms_reader_config_file }}" owner: "di" group: "di-config" mode: "0640" notify: - restart di-sms-reader - name: enable di-sms-reader service: name: "di-sms-reader" enabled: yes