- hosts: all
  roles:
  - role: doas
    tags:
    - doas
  tasks:
  - name: ensure users exist
    user:
      name: '{{ item.name }}'
      comment: '{{ item.comment | d(omit) }}'
      uid: '{{ item.uid | d(omit) }}'
      groups: '{{ item.groups | d(omit) }}'
      create_home: true
      local: true
      password: '*'
      state: present
    loop: '{{ managed_users | d([]) }}'
    tags:
    - user