---
- block:
    - name: Override default .bashrc for given users
      template:
        src: etc/bashrc.j2
        dest: "{{ item }}"
        owner: root
        group: root
        mode: 0644
      loop: "{{ users_bash_bashrc_overrides }}"

    - name: Setup custom bash profile at '/etc/profile.d/custom.sh'
      template:
        src: etc/profile.d/custom.sh.j2
        dest: /etc/profile.d/custom.sh
        owner: root
        group: root
        mode: 0644

    - name: Set umask to /etc/login.defs
      lineinfile:
        path: /etc/login.defs
        regexp: '^(?P<umask>UMASK\s+).+'
        line: \g<umask>{{ users_global_umask }}
        backrefs: yes
        state: present

    - name: Enforcing minimum password lifetime
      lineinfile:
        path: /etc/login.defs
        regexp: '^(?P<passmin>PASS_MIN_DAYS\s+).+'
        line: \g<passmin>{{ users_pass_min_day }}
        backrefs: yes
        state: present
  become: True
  become_user: root