---
- name: Install prerequisite packages
  ansible.builtin.apt:
    name:
      - ca-certificates
      - curl
      - git
      - unzip
    state: present
    update_cache: true

- name: Ensure application group exists
  ansible.builtin.group:
    name: "{{ gitvana_app_group }}"
    system: true

- name: Ensure application user exists
  ansible.builtin.user:
    name: "{{ gitvana_app_user }}"
    group: "{{ gitvana_app_group }}"
    system: true
    create_home: false
    shell: /usr/sbin/nologin

- name: Ensure application directory exists
  ansible.builtin.file:
    path: "{{ gitvana_app_root }}"
    state: directory
    owner: "{{ gitvana_app_user }}"
    group: "{{ gitvana_app_group }}"
    mode: "0755"