---
# Security #1
- name: Create EtherPad system group
  group:
    name: etherpad
    system: yes
    state: present

# Security #2
- name: Create EtherPad user
  user:
    name: etherpad
    group: etherpad
    home: '/var/local/etherpad'
    comment: EtherPad
    system: yes
    state: present

# Security #3
- name: Secure Etherpad home directory
  file:
    path: '/var/local/etherpad'
    state: directory
    owner: etherpad
    group: etherpad
    mode: 0750