routeros_firmware: Use dedicated user for download

roles/routeros_firmware/tasks/main.yml

@@ -1,11 +1,26 @@
 ---
+- name: Create group
+  ansible.builtin.group:
+    name: routeros
+    system: true
+
+- name: Create user
+  ansible.builtin.user:
+    name: routeros
+    comment: RouterOS Downloader
+    group: routeros
+    create_home: false
+    home: /var/empty
+    shell: /sbin/nologin
+    system: true
+
 - name: Create download directory
   ansible.builtin.file:
     path: /srv/web/oob.foo.sh/routeros
     state: directory
-    mode: "0755"
+    mode: "0775"
     owner: root
-    group: "{{ ansible_wheel }}"
+    group: routeros
 
 - name: Install README.md
   ansible.builtin.copy:
@@ -27,5 +42,6 @@
   ansible.builtin.cron:
     name: download-routeros-firmware
     job: /usr/local/bin/download-routeros-firmware
+    user: routeros
     hour: "05"
     minute: "25"