---
- name: Set xrdp user password
  ansible.builtin.user:
    name: xrdp
    password: "{{ xrdp_pass | password_hash('sha512') }}"
    update_password: always
    state: present

- name: Add xrdp user to ssl group
  ansible.builtin.user:
    name: xrdp
    groups: ssl-cert
    append: true

- name: Reload systemd daemon
  ansible.builtin.systemd:
    daemon_reload: true

- name: Restart xrdp service
  ansible.builtin.systemd:
    name: xrdp
    state: restarted
...