ansible-role-borg/tasks/server.yml

---
- name: Create borg group on server
  group:
    name: borg
    system: yes

- name: Create borg user on server
  user:
    name: borg
    group: borg
    shell: /bin/sh
    home: /srv/borg
    createhome: yes
    system: yes
    password: '*'

- name: Ensure borg directories exist on server
  file:
    state: directory
    path: "{{ item }}"
    owner: borg
    mode: 0700
  loop:
    - /srv/borg
    - /srv/borg/.ssh
    - /srv/borg/repos

- name: deploy borg authorized_keys
  template:
    dest: /srv/borg/.ssh/authorized_keys
    src: authorized_keys
    owner: borg
    mode: 0400
...