---
- block:
    - name: Override default .bashrc for given users
      template:
        src: etc/bashrc.j2
        dest: "{{ item }}"
        owner: root
        group: root
        mode: 0644
      loop: "{{ users_bash_bashrc_overrides }}"

    - name: Setup custom bash profile at '/etc/profile.d/custom.sh'
      template:
        src: etc/profile.d/custom.sh.j2
        dest: /etc/profile.d/custom.sh
        owner: root
        group: root
        mode: 0644

    - name: Set umask to /etc/login.defs
      lineinfile:
        path: /etc/login.defs
        regexp: '^UMASK(\s+)'
        line: 'UMASK\1{{ users_global_umask }}'
        backrefs: yes
        state: present

    - name: Enforcing minimum password lifetime
      lineinfile:
        path: /etc/login.defs
        regexp: '^PASS_MIN_DAYS(\s+)'
        line: 'PASS_MIN_DAYS\1{{ users_pass_min_day }}'
        backrefs: yes
        state: present
  become: True
  become_user: root