---
- name: Create OPA group
  group:
    name: "{{ openpolicyagent_group }}"
    state: present

- name: Create OPA user
  user:
    name: "{{ openpolicyagent_user }}"
    comment: "Open Policy Agent user"
    group: "{{ openpolicyagent_group }}"
    shell: /bin/nologin
    create_home: yes
    home: "{{ openpolicyagent_home }}"
    state: present

- name: Create OPA bin directory
  file:
    path: "{{ openpolicyagent_bin }}"
    owner: "{{ openpolicyagent_user }}"
    group: "{{ openpolicyagent_group }}"
    mode: "0755"
    state: directory