Fix cleanup services with roundcube_separate_user enabled

handlers/main.yml

@@ -0,0 +1,3 @@
+- name: reload systemd
+  ansible.builtin.systemd:
+    daemon_reload: True

tasks/main.yml

@@ -21,6 +21,33 @@
     create_home: false
     system: true
 
+- name: Create directories for systemd drop-ins
+  when: roundcube_separate_user
+  ansible.builtin.file:
+    path: '/etc/systemd/system/{{ item }}.d'
+    state: directory
+  loop:
+  - roundcube-gc.service
+  - roundcube-cleandb.service
+
+- name: Create systemd drop-ins to use separate user
+  when: roundcube_separate_user
+  ansible.builtin.template:
+    src: 10-separate-user.conf.j2
+    dest: '/etc/systemd/system/{{ item }}'
+  loop: &roundcube_separate_user_dropins
+  - roundcube-gc.service.d/10-separate-user.conf
+  - roundcube-cleandb.service.d/10-separate-user.conf
+  notify: reload systemd
+
+- name: Remove systemd drop-ins to use separate user
+  when: not roundcube_separate_user
+  ansible.builtin.file:
+    path: '/etc/systemd/system/{{ item }}'
+    state: absent
+  loop: *roundcube_separate_user_dropins
+  notify: reload systemd
+
 # php_version and "restart php-fpm" handler from nginx role
 - name: Create roundcube php pool
   when: roundcube_separate_user
@@ -30,8 +57,7 @@
     owner: root
     group: root
     mode: 0644
-  notify:
+  notify: restart php-fpm
-  - restart php-fpm
 
 - name: Create db directory
   ansible.builtin.file:

templates/10-separate-user.conf.j2

@@ -0,0 +1,3 @@
+[Service]
+User=roundcube
+Group=roundcube