- name: "[CONFIG SECURE GRUB] Comprobando si es necesario configurar secure grub"
  meta: end_host
  when: secure-grub_enabled is not defined or not secure-grub_enabled

#++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
# Secure GRUB edition with password
# paso1 - Proteger grub
- name: GRUB password boot protection
  blockinfile:
    path: /etc/grub.d/40_custom
    block: |
      set superusers="{{ user_grub }}"
      password_pbkdf2 {{ user_grub }} {{ code_grub }}
  notify: grub register
#  tags: 
#  - grub-password
#++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++