---
- name: Ensure MariaDB users are present (or absent)
  community.mysql.mysql_user:
    name: "{{ item.name }}"
    host: "{{ item.host | default('localhost') }}"
    password: "{{ item.password }}"
    priv: "{{ item.priv | default('*.*:USAGE') }}"
    state: "{{ item.state | default('present') }}"
    append_privs: "{{ item.append_privs | default('no') }}"
    encrypted: "{{ item.encrypted | default('no') }}"
    plugin_auth_string: "{{ item.plugin_auth_string | default(omit) }}"
    login_unix_socket: "{{ mariadb_unix_socket }}"
    login_user: "{{ mariadb_root_user | default('root') }}"
    login_password: "{{ mariadb_root_password | default(omit) }}"
    check_implicit_admin: true
  loop: "{{ mariadb_users }}"
  no_log: true