From da77ab91c7221850fcfc2e231e8c71db8489e250 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Hannes=20K=C3=B6rber?= <hannes@hkoerber.de>
Date: Sat, 2 Oct 2021 11:32:17 +0200
Subject: [PATCH] Add dedicated dotfiles user

---
 playbook.yml | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/playbook.yml b/playbook.yml
index d1c9dd7..4bd8c08 100644
--- a/playbook.yml
+++ b/playbook.yml
@@ -485,11 +485,21 @@
       become: true
       become_user: root
 
+    - name: create dotfiles user
+      user:
+        name: dotfiles
+        home: /var/lib/dotfiles
+        create_home: false
+        shell: /bin/bash
+        system: true
+      become: true
+      become_user: root
+
     - name: create dotfiles directory
       file:
         state: directory
         path: /var/lib/dotfiles
-        owner: nobody
+        owner: dotfiles
         group: dotfiles
         mode: '0775' # group needs write access!
       become: true