refactor: use the yml extension for every yaml file

The repository mixed both extensions, the molecule scenario used yml while the role itself used yaml. The yml
extension is the one ansible-galaxy and molecule generate, so it is applied throughout and across the sibling roles.

The include_tasks calls in tasks/main.yml and tasks/create_unix_user.yml name their target explicitly and were
adjusted accordingly, otherwise the role would no longer find the included task files.

Co-authored-by: Copilot <copilot@github.com>

tasks/create_unix_user.yml

@@ -0,0 +1,181 @@
+---
+
+- name: "Define home directory for unix user: {{ unix_user.key }}"
+  ansible.builtin.set_fact:
+    _unix_users_home: "{{ unix_user.value.home | default('/home/' + unix_user.key) }}"
+
+- name: "Create btrfs volume for unix user: {{ unix_user.key }}"
+  when: unix_user.value.btrfs is defined and
+        unix_user.value.btrfs
+  block:
+  - name: "Find btrfs device"
+    ansible.builtin.command:
+      cmd: /bin/bash -c "findmnt -no SOURCE -T {{ _unix_users_home }} | sed 's/\[.*\]//'"
+    register: _unix_users_btrfs_device
+    changed_when: false
+
+  - name: "Determine filesystem of device"
+    ansible.builtin.set_fact:
+      _unix_users_device_filesystem: "{{ ansible_facts['mounts'] | selectattr('device', 'equalto', _unix_users_btrfs_device.stdout) | map(attribute='fstype') | first }}"
+
+  - name: "Fail if device does not have a btrfs file system"
+    ansible.builtin.fail:
+      msg: "Determined device {{ _unix_users_btrfs_device.stdout }} does not have a btrfs filesystem"
+    when: _unix_users_device_filesystem != 'btrfs'
+
+  # The subvolume stays root owned until the user exists. It is chowned further below, after the user was created.
+  - name: "Create btrfs volume for unix user: {{ unix_user.key }}"
+    community.general.btrfs_subvolume:
+      filesystem_device: "{{ _unix_users_btrfs_device.stdout }}"
+      name: "{{ _unix_users_home }}"
+      state: present
+
+- name: "Create unix user: {{ unix_user.key }}"
+  ansible.builtin.user:
+    name: "{{ unix_user.key }}"
+    uid: "{{ unix_user.value.uid | default(omit) }}"
+    group: "{{ unix_user.value.group | default('users') }}"
+    groups: "{{ unix_user.value.groups | default(omit) }}"
+    comment: "{{ unix_user.value.name | default(omit) }}"
+    create_home: "{{ unix_user.value.create_home | default(true) }}"
+    home: "{{ _unix_users_home }}"
+    shell: "{{ unix_user.value.shell | default('/bin/bash') }}"
+    # The salt is derived from the user name, a random one would produce a new hash and a change on every run.
+    password: "{{ unix_user.value.password | password_hash('sha512', unix_user.key | hash('sha512') | truncate(16, true, '')) if unix_user.value.password is defined and unix_user.value.password | length > 0 else '!' }}"
+    state: present
+
+- name: "Adapt permissions and copy skel for unix user: {{ unix_user.key }}"
+  when: unix_user.value.btrfs is defined and
+        unix_user.value.btrfs
+  block:
+  - name: "Copy skel files"
+    ansible.builtin.include_tasks: copy_skel_file.yml
+    loop_control:
+      loop_var: skel_file
+    with_items:
+    - ".bash_logout"
+    - ".bash_profile"
+    - ".bashrc"
+  - name: "Change permission unix users home dir: {{ unix_user.key }}"
+    ansible.builtin.file:
+      path: "{{ _unix_users_home }}"
+      owner: "{{ unix_user.key }}"
+      group: "{{ unix_user.value.group | default('users') }}"
+      state: directory
+      mode: "0755"
+
+- name: "Create .ssh directory for unix user: {{ unix_user.key }}"
+  ansible.builtin.file:
+    path: "{{ _unix_users_home }}/.ssh"
+    owner: "{{ unix_user.key }}"
+    group: "{{ unix_user.value.group | default('users') }}"
+    mode: "0700"
+    state: directory
+  when: unix_user.value.ssh is defined
+
+- name: "Create authorized_keys file for unix user: {{ unix_user.key }}"
+  ansible.builtin.template:
+    src: authorized_keys.j2
+    dest: "{{ _unix_users_home }}/.ssh/authorized_keys"
+    owner: "{{ unix_user.key }}"
+    group: "{{ unix_user.value.group | default('users') }}"
+    mode: "0600"
+  when: unix_user.value.ssh.authorized_keys is defined and unix_user.value.ssh.authorized_keys | length > 0
+
+- name: "Remove authorized_keys file for unix user: {{ unix_user.key }}"
+  ansible.builtin.file:
+    path: "{{ _unix_users_home }}/.ssh/authorized_keys"
+    state: absent
+  when: unix_user.value.ssh.authorized_keys is not defined or unix_user.value.ssh.authorized_keys | length <= 0
+
+# The relative source is resolved against the files directory of the playbook, like the lookup in authorized_keys.j2.
+- name: "Create private SSH keys for unix user: {{ unix_user.key }}"
+  ansible.builtin.copy:
+    src: "ssh/private_keys/{{ item }}"
+    dest: "{{ _unix_users_home }}/.ssh/{{ item }}"
+    owner: "{{ unix_user.key }}"
+    group: "{{ unix_user.value.group | default('users') }}"
+    mode: "0600"
+  no_log: true
+  with_items:
+  - "{{ unix_user.value.ssh.private_keys }}"
+  when: unix_user.value.ssh.private_keys is defined and unix_user.value.ssh.private_keys | length > 0
+
+- name: "Extract public SSH keys from private keys for unix user: {{ unix_user.key }}"
+  ansible.builtin.shell:
+    cmd: "ssh-keygen -y -f {{ _unix_users_home }}/.ssh/{{ item }} > {{ _unix_users_home }}/.ssh/{{ item }}.pub"
+    creates: "{{ _unix_users_home }}/.ssh/{{ item }}.pub"
+  with_items:
+  - "{{ unix_user.value.ssh.private_keys }}"
+  when: unix_user.value.ssh.private_keys is defined and unix_user.value.ssh.private_keys | length > 0
+
+- name: "Correct permissions of public SSH keys for unix user: {{ unix_user.key }}"
+  ansible.builtin.file:
+    path: "{{ _unix_users_home }}/.ssh/{{ item }}.pub"
+    owner: "{{ unix_user.key }}"
+    group: "{{ unix_user.value.group | default('users') }}"
+    mode: "0644"
+  with_items:
+  - "{{ unix_user.value.ssh.private_keys }}"
+  when: unix_user.value.ssh.private_keys is defined and unix_user.value.ssh.private_keys | length > 0
+
+- name: "Create custom SSH client config for unix user: {{ unix_user.key }}"
+  ansible.builtin.template:
+    src: config.j2
+    dest: "{{ _unix_users_home }}/.ssh/config"
+    owner: "{{ unix_user.key }}"
+    group: "{{ unix_user.value.group | default('users') }}"
+    mode: "0644"
+  when: unix_user.value.ssh.config is defined and unix_user.value.ssh.config | length > 0
+
+- name: "Remove custom SSH client config for unix user: {{ unix_user.key }}"
+  ansible.builtin.file:
+    path: "{{ _unix_users_home }}/.ssh/config"
+    state: absent
+  when: unix_user.value.ssh.config is not defined or unix_user.value.ssh.config | length <= 0
+
+- name: "Create .forward file to forward emails for unix user: {{ unix_user.key }}"
+  ansible.builtin.template:
+    src: forward.j2
+    dest: "{{ _unix_users_home }}/.forward"
+    owner: "{{ unix_user.key }}"
+    group: "{{ unix_user.value.group | default('users') }}"
+    mode: "0644"
+  when: unix_user.value.email is defined
+
+- name: "Remove .forward file to forward emails for unix user: {{ unix_user.key }}"
+  ansible.builtin.file:
+    path: "{{ _unix_users_home }}/.forward"
+    state: absent
+  when: unix_user.value.email is not defined
+
+- name: "Create XDG base directories"
+  ansible.builtin.file:
+    path: "{{ item }}"
+    owner: "{{ unix_user.key }}"
+    group: "{{ unix_user.value.group | default('users') }}"
+    mode: "0755"
+    state: "directory"
+  with_items:
+  - "{{ unix_user.value.xdg.dirs.cache | default(_unix_users_home + '/.cache') }}"
+  - "{{ unix_user.value.xdg.dirs.config | default(_unix_users_home + '/.config') }}"
+  - "{{ unix_user.value.xdg.dirs.data | default(_unix_users_home + '/.local/share') }}"
+  - "{{ unix_user.value.xdg.dirs.state | default(_unix_users_home + '/.local/state') }}"
+
+- name: "Create shell rc files"
+  when: unix_user.value.shell_rc_files is defined
+  ansible.builtin.include_tasks: create_shell_rc_file.yml
+  with_items:
+  - "{{ unix_user.value.shell_rc_files }}"
+  loop_control:
+    loop_var: shell_rc_file
+
+- name: "Create .netrc file"
+  when: unix_user.value.netrc is defined and unix_user.value.netrc | length > 0
+  ansible.builtin.template:
+    src: netrc.j2
+    dest: "{{ _unix_users_home }}/.netrc"
+    owner: "{{ unix_user.key }}"
+    group: "{{ unix_user.value.group | default('users') }}"
+    mode: "0600"
+  no_log: true