main.yml

---

- name: ensure the wordpress package is installed
  apt:
    name:
      - wordpress
      - wordpress-l10n
    state: present
    install_recommends: false
  tags:
    - wordpress
    - webservices

- name: "ensure group for {{ wordpress_name }} exists"
  group:
    name: "{{ wordpress_user }}"
    state: present
    system: true
  tags:
    - wordpress
    - webservices

- name: "ensure user for {{ wordpress_name }} exists"
  user:
    name: "{{ wordpress_user }}"
    group: "{{ wordpress_group }}"
    state: present
    system: true
    shell: /usr/bin/nologin
    home: "{{ wordpress_web_root }}"
    createhome: false
  tags:
    - wordpress
    - webservices

- name: "ensure the wordpress folders for {{ wordpress_name }} exists"
  file:
    state: directory
    mode: "u=rx,g=rx,o="
    owner: "{{ wordpress_user }}"
    group: "www-data"
    path: "{{ wordpress_web_root }}/{{ item }}"
  with_items:
    - "{{ wordpress_name }}-files"
    - "{{ wordpress_name }}"
  tags:
    - wordpress
    - webservices

- name: Create overlayfs workdir for {{ wordpress_name }}
  file:
    state: directory
    mode: '0700'
    owner: root
    group: root
    path: "{{ wordpress_web_root }}/{{ wordpress_name }}-workdir"
  tags:
    - wordpress
    - webservices

# yamllint disable-line rule:line-length
- name: "ensure local folders without write permissions for {{ wordpress_name }} exist"
  file:
    state: directory
    mode: "u=rx,g=rx,o="
    owner: "{{ wordpress_user }}"
    group: "www-data"
    path: "{{ wordpress_web_root }}/{{ wordpress_name }}-files/{{ item }}"
  with_items:
    - wp-content