# 
# Task: remove user
#
# - remove user  
# - remove remote access 
# - remove ip from ufw
#

- name: Input Username
  pause:
    prompt: "Username?"
  register: mariadb_username

- name: Search for username 
  community.mysql.mysql_query:
    login_db: "mysql"
    login_unix_socket: "{{ mariadb_socket }}"
    query: SELECT Host FROM mysql.user WHERE User = '{{ mariadb_username.user_input }}'
  register: mariadb_user_hosts

#
# create user for localhast
#
- name: Drop User
  community.mysql.mysql_query:
    login_db: "mysql"
    login_unix_socket: "{{ mariadb_socket }}"
    query: DROP USER '{{ mariadb_username.user_input }}'@'{{ item.Host }}'
  loop: "{{ mariadb_user_hosts.query_result | flatten }}"

#
# add rule in ufw for remote ip 
#
- name: Remove IP for remote access
  ufw:
    delete: true
    rule: allow
    from_ip: "{{ item.Host }}"
    port: 3306
  loop: "{{ mariadb_user_hosts.query_result | flatten | selectattr('Host', 'match', '^[0-9]+.[0-9]+.[0-9]+.[0-9]+$') }}"