ansible-playbooks/create-user.yml

##
# Ansible playbook for creating a new user with their own mysql db and apache site
#

---
- hosts: all
  user: root

  vars_files:
    - settings.yml

  vars_prompt:
    - name: "domain_name"
      prompt: "Domain Name (www. will be prepended as an alias)"
      private: no

    - name: "username"
      prompt: "Username (max 16 chars)"
      private: no

    - name: "user_fullname"
      prompt: "Full Name"
      private: no

    - name: "user_password"
      prompt: "Password"
      private: no
      encrypt: "sha512_crypt"
      salt_size: 8

    - name: "mysql_password"
      prompt: "MySQL Password"
      private: no

  tasks:
    - name: Linux | Create User
      user: name=$username comment="$user_fullname" password=$user_password shell="/bin/bash" groups="www-data"
      tags: common

    - name: MySQL | Create Database
      mysql_db: name="$username"
      tags: mysql

    - name: MySQL | Create User with host localhost and privs on own DB
      mysql_user: user="$username" password="$mysql_password" host="localhost" priv="$username.*:ALL"
      tags: mysql

    - name: Apache | Create virtual host site
      template: src=templates/etc-apache2-sites-available-username.j2 dest=/etc/apache2/sites-available/{{ username }}
      tags: apache

    - name: Apache | Create document root
      file: path=/home/$username/public_html owner=$username group=$username mode=0755 state=directory
      tags: apache

    - name: Apache | Create index.html
      template: src=templates/home-username-public_html-index.j2 dest=/home/$username/public_html/index.html
      tags: file

# notes for creating wordpress site:

#cd /home/{username}/public_html
#sudo tar -xvf /home/wordpress-install.tgz
#sudo chown -R {username}:www-data .
#chmod -R 775 public_html

#echo "define('FS_CHMOD_DIR', (0775 & ~ umask()));
#define('FS_CHMOD_FILE', (0664 & ~ umask()));" >> wp-config.php

    - name: Apache | Enable site
      command: a2ensite {{ username }}
      tags: apache

    - name: Apache | Reload service
      command: service apache2 reload
      tags: apache