improve role, especially wrt. passwords

defaults/main.yml

@@ -0,0 +1,17 @@
+# SPDX-FileCopyrightText: 2023 Max Mehl <https://mehl.mx>
+#
+# SPDX-License-Identifier: Apache-2.0
+
+# Allow user to have no password, so login possible for everyone
+allow_no_password: false
+# Additional groups user will be added to.
+user_groups: []
+# Whether to add user to groups in `user_groups` without removing them from
+# other groups.
+groups_append: true
+# Whether to generate an SSH key for the new user
+generate_ssh_key: true
+# SSH key type
+ssh_key_type: ed25519
+# Shell
+shell: /bin/bash