---

- name: Render KeyDB configuration
  ansible.builtin.template:
    src: etc/keydb/keydb.conf.j2
    dest: /etc/keydb/keydb.conf
    owner: keydb
    group: keydb
    mode: "0640"
  notify:
    - restart keydb

- name: Add www-data to keydb group
  ansible.builtin.user:
    name: www-data
    groups: [keydb]
    append: true
  notify:
    - restart php-fpm
    - restart apache2