- hosts: workers
  remote_user: debian
  become: yes
  roles:
    - sane_debian_system
    - comfortable
    - unix_users
    - ick-worker
  tasks:
    - shell: |
        sed -i "s/'uapi_logs_id_get',/'uapi_logs_id_get','create','update','show','delete',/" /usr/bin/worker_manager
    - systemd:
        state: restarted
        name: ick-worker
    - apt:
        name:
          - psmisc
  vars:
    ansible_python_interpreter: /usr/bin/python3

    sane_debian_system_version: 2
    sane_debian_system_codename: buster
    sane_debian_system_hostname: "{{ inventory_hostname }}"

    unix_users_version: 2
    unix_users:
      - username: debian
        sudo: yes
        authorized_keys: |
          {{ liw_personal_ssh_key_pub }}
      - username: _ickwm
        sudo: yes
        ssh_key: "{{ wm_ssh_key }}"
        ssh_key_pub: "{{ wm_ssh_key_pub }}"
        authorized_keys: |
          {{ liw_personal_ssh_key_pub }}

    verify_tls: no