add token support to script to support ssh forced commands with tokens

tasks/main.yml

@@ -1,7 +1,14 @@
-- name: install powerdns backends
+- name: install powerdns backends and dependencies
   apt:
     pkg:
     - "pdns-backend-pipe"
+    - "python3-click"
+
+- name: create letsencrypt user
+  user:
+    name: letsencrypt
+    password: '*'
+    system: True
 
 - name: create folders
   file:
@@ -11,7 +18,14 @@
     group: "{{ item.group|d('pdns') }}"
     mode: "{{ item.mode|d('0755') }}"
   with_items:
-  - { "path": "/var/lib/powerdns/letsencrypt/" }
+  - { "path": "/var/lib/powerdns/letsencrypt/", "owner": "letsencrypt" }
+
+- name: ensure database permissions
+  file:
+    path: "{{ powerdns.letsencrypthandler.dbpath }}"
+    owner: letsencrypt
+    group: pdns
+    mode: 0644
 
 - name: copy powerdns letsencrypt handler
   template: