---
 - name: user creation
   hosts: localhost
#  no_log: True
   vars:
           users:
                   - qwert
                 # - user2
                 # - user3
   tasks:
     - name: load global variables
       include_vars:
               file: /etc/ansible/vars/global.yml
               name: global
       no_log: True

     - name: load secrets
       include_vars:
               file: /etc/ansible/vars/secret.yml
               name: secret
       no_log: True

     - name: create user
       user:
               name: "{{ item }}"
               groups: sudo
               shell: /bin/bash
               password: "{{ secret.default_pw }}"
               update_password: on_create
       with_items: "{{ users }}"
       register: create

     - name: add user to group only at specific server
       user:
               name: "{{ item }}"
               groups: sudo, key
       with_items: "{{ users }}"
       when: "'scrans' in ansible_hostname"

     - name: aging password
       command: chage -d 0 "{{ item }}"
       with_items: "{{ users }}"
       when: create.changed

     - name: mail login
       mail:
         host: "{{ global.mail_server }}"
         port: "{{ global.mail_port }}"
         subject: Ansible - create user
         subtype: html
         body: Hello, this is your new user at {{ ansible_nodename }}.<br>
               user name {{ item }}<br>
               Passwd {{ secret.pw_to_mail }}<br>
               you will have to change your password at first login
         from: ansible@domain.xx
         to: "{{ item }}@domain.xx"
       with_items: "{{ users }}"
       no_log: True