feat(user/tmpfiles): create role for user's tmpdir

Signed-off-by: Matej Focko <me@mfocko.xyz>

playbooks/bootstrap.yml

@@ -46,6 +46,11 @@
     - role: user/editors/neovim
       tags: neovim
 
+    # Directory for temporary files
+    - role: user/tmpfiles
+      become: true
+      tags: tmpfiles
+
     # Configure git
     - role: user/git
       tags: git

roles/user/tmpfiles/defaults/main.yml

@@ -0,0 +1,2 @@
+---
+user_tmpfiles_retention: "7d"

roles/user/tmpfiles/handlers/main.yml

@@ -0,0 +1,5 @@
+---
+- name: Create the temporary directory
+  ansible.builtin.command:
+    cmd: systemd-tmpfiles --create
+    creates: /var/tmp/{{ target_user }}

roles/user/tmpfiles/tasks/main.yml

@@ -0,0 +1,7 @@
+---
+- name: Create tmpfiles config
+  ansible.builtin.template:
+    src: templates/user.conf
+    dest: /etc/tmpfiles.d/user.conf
+    mode: 0644
+  notify: "Create the temporary directory"

roles/user/tmpfiles/templates/user.conf

@@ -0,0 +1 @@
+d /var/tmp/{{ target_user }} 0640 {{ target_user }} {{ target_group }} {{ user_tmpfiles_retention }}