set 0700 home directory permissions by default

defaults/main.yml

@@ -15,3 +15,5 @@ generate_ssh_key: true
 ssh_key_type: ed25519
 # Shell
 shell: /bin/bash
+# Home directory permissions
+homedir_permissions: "0700"

tasks/main.yml

@@ -27,7 +27,7 @@
     # None of the special cases has been handled before
     - password_value is not defined
   block:
-    - name: Create idempotent salt for {{ username }}'s password
+    - name: Create idempotent salt for password of {{ username }}
       set_fact:
         salt: "{{ ((username + inventory_hostname) | hash('sha512'))[:16] }}"
 
@@ -51,3 +51,9 @@
     # Groups
     groups: "{{ user_groups }}"
     append: "{{ groups_append }}"
+
+- name: Ensure correct directory settings for user {{ username }}
+  ansible.builtin.file:
+    path: "/home/{{ username }}"
+    state: directory
+    mode: "{{ homedir_permissions }}"