#1 Work out sftp role

defaults/main.yml

+sftp_user: []
+sftp_devpath: false

meta/main.yml

+---
+
+dependencies:
+  - { role: common }

tasks/main.yml

-    - name: "Ensure Group"
-      group: name=sftp state=present
-    - name: "Create User"
-      user: name={{username}} group=sftp home=/home/{{username}} shell=/bin/false
-    - name: "Install Certificate"
-      authorized_key: user={{username}} key="{{lookup('file', certificate)}}"
-    - name: "Ensure SFTP Directory"
-      file: dest=/var/sftp owner=root group=root state=directory mode=755
-    - name: "Create Data Directory"
-      file: dest=/var/sftp/data owner=root group=sftp state=directory mode=775
-    - name: "Create Mount Point"
-      mount: fstype=none opts=bind name=/var/sftp/data/dev src={{devpath}} state=mounted
-    - name: "Set ownership"
-      command: chown -R root:sftp {{devpath}}
-    - name: "Set permissions"
-      command: chmod -R g+w {{devpath}}
-    - name: "Collect SVN Directories"
-      command: find {{devpath}} -type d -name .svn
-      register: svnpaths
-    - name: "Set ownership on SVN Directories"
-      command: chown -R root:root {{item}}
-      with_items: svnpaths.stdout_lines
+---
+# file: roles/sftp/tasks/main.yml
+
+- name: "SFTP | Ensure Group"
+  group:
+    name=sftp
+    state=present
+
+- name: "SFTP | Ensure SFTP Directory"
+  file:
+    dest=/var/sftp
+    owner=root
+    group=root
+    state=directory
+    mode=755
+
+- name: "SFTP | Create User"
+  user:
+    name={{ item.username }}
+    group=sftp
+    home=/home/{{ item.username }}
+    shell=/bin/false
+  with_items: sftp_user
+
+- name: "SFTP | Install Key"
+  authorized_key:
+    user={{ item.username }}
+    key={{ item.key }}
+  with_items: sftp_user
+
+- name: "SFTP | Create Data Directory"
+  file:
+    dest=/var/sftp/data
+    owner=root
+    group=sftp
+    state=directory
+    mode=775
+
+- include: mount.yml
+  when: sftp_devpath

tasks/mount.yml

+---
+# file: roles/sftp/tasks/mount.yml
+
+- name: "SFTP | Create Mount Point"
+  mount:
+    fstype=none
+    opts=bind
+    name=/var/sftp/data/dev
+    src={{ sftp_devpath }}
+    state=mounted
+
+- name: "SFTP | Set ownership"
+  command: chown -R root:sftp {{ sftp_devpath }}
+
+- name: "SFTP | Set permissions"
+  command: chmod -R g+w {{ sftp_devpath }}
+
+- name: "SFTP | Collect SVN Directories"
+  command: find {{ sftp_devpath }} -type d -name .svn
+  register: svnpaths
+
+- name: "SFTP | Set ownership on SVN Directories"
+  command: chown -R root:root {{ item }}
+  with_items: svnpaths.stdout_lines