---
- name: Ensure MariaDB users are present (or absent)
  community.mysql.mysql_user:
    name: "{{ item.name }}"
    host: "{{ item.host | default('localhost') }}"
    password: "{{ item.password }}"
    priv: "{{ item.priv | default('*.*:USAGE') }}"
    state: "{{ item.state | default('present') }}"
    append_privs: "{{ item.append_privs | default('no') }}"
    encrypted: "{{ item.encrypted | default('no') }}"
    login_unix_socket: "{{ mariadb_unix_socket }}"
    resource_limits: "{{ item.resource_limits | default({}) }}"
  loop: "{{ mariadb_users }}"
  no_log: true