ansible/roles/etherpad/tasks/1_user_group.yml

---
# Security #1
- name: Create EtherPad system group
  group:
    name: etherpad
    system: yes
    state: present

# Security #2
- name: Create EtherPad user
  user:
    name: etherpad
    group: etherpad
    home: /var/local/etherpad
    comment: EtherPad
    system: yes
    state: present

# Security #3
- name: Secure Etherpad home directory
  file:
    path: /var/local/etherpad
    state: directory
    owner: etherpad
    group: etherpad
    mode: 0750