Move hedgedoc user setup to its own profile

data/hostname/bardo.internal.admin.swh.network.yaml

-groups:
-  hedgedoc:
-    gid: 6000
-
-users:
-  hedgedoc:
-    uid: 6000
-    shell: /bin/bash
-    groups:
-      - hedgedoc
-
 hedgedoc::db::host: localhost
 hedgedoc::db::database: hedgedoc
 hedgedoc::db::username: hedgedoc
@@ -40,9 +29,6 @@ hedgedoc::release::version: 1.7.1
 hedgedoc::release::digest: 17e7092430b36c96059309fdd03f9244f6a13611e28ced153d9dbf97e109d5ba
 hedgedoc::release::digest_type: sha256
 
-hedgedoc::user: hedgedoc
-hedgedoc::group: hedgedoc
-
 hedgedoc::allow_anonymous: true
 hedgedoc::allow_anonymous_edits: true
 

site-modules/profile/manifests/hedgedoc.pp

 # deploy a hedgedoc instance
 class profile::hedgedoc {
   include profile::hedgedoc::apt_config
+  include profile::hedgedoc::user
 
-  # ---- configuration
-  $user = lookup('hedgedoc::user')
-  $group = lookup('hedgedoc::group')
+  $user = $::profile::hedgedoc::user::user
+  $group = $::profile::hedgedoc::user::group
 
+  # ---- configuration
   $base_url = lookup('swh::deploy::hedgedoc::base_url')
 
   $db_host = lookup('hedgedoc::db::host')

site-modules/profile/manifests/hedgedoc/user.pp

+# Create the system user for hedgedoc
+class profile::hedgedoc::user {
+  $user = 'hedgedoc'
+  $group = 'hedgedoc'
+
+  group {$group:
+    system => true,
+  }
+
+  user {$user:
+    system => true,
+    gid    => $group,
+    shell  => '/usr/sbin/nologin',
+    home   => '/nonexistent',
+  }
+
+  # Cleanup for old versions of this manifest
+  file {'/home/hedgedoc':
+    ensure  => absent,
+    purge   => true,
+    recurse => true,
+    force   => true,
+  }
+}