---

- name: Create group for access to ansible credentials
  group:
    name: ansible-credentials # TODO Export to variable
    state: present
    system: yes

- name: Configure storage for ansible credentials
  file:
    path: "/etc/ansible-credentials" # TODO Export to variable
    state: directory
    owner: root
    group: ansible-credentials
    mode: 0770

- name: Allow access to ansible credentials
  user:
    append: yes
    name: "{{ ansible_user }}"
    groups:
      - ansible-credentials