Provide a good initial config for znc (but leave it alone after that)

roles/ircbouncer/tasks/znc.yml

 - name: Ensure znc user and group can read cert
   file: path=/var/lib/znc/znc.pem group=znc owner=znc
 
-# NOTE: you should probably just generate this using the directions above and then edit via the web panel
-#- name: Copy znc configuration file into place
-#  template: src=var_lib_znc_configs_znc.conf.j2 dest=/var/lib/znc/configs/znc.conf owner=znc group=znc
+- name: Check for existing config file
+  command: cat /var/lib/znc/configs/znc.conf
+  register: znc_config
+  ignore_errors: True
+  changed_when: False  # never report as "changed"
 
-- name: Ensure znc is a system service
-  command: update-rc.d znc defaults
-  notify: restart znc
+- name: Copy znc configuration file into place
+  template: src=var_lib_znc_configs_znc.conf.j2 dest=/var/lib/znc/configs/znc.conf owner=znc group=znc
+  when: znc_config.rc != 0
 
+- name: Ensure znc is a system service
+  service: name=znc state=started enabled=true

roles/ircbouncer/templates/var_lib_znc_configs_znc.conf.j2

 LoadModule = webadmin
 LoadModule = fail2ban
 LoadModule = lastseen
+LoadModule = partyline
 MaxBufferSize = 500
+Motd = Connected to ZNC
 PidFile = /var/run/znc/znc.pid
 ProtectWebSessions = true
+SSLCertFile = /var/lib/znc/znc.pem
 ServerThrottle = 30
 Skin = _default_
 StatusPrefix = *
 	SSL = true
 </Listener>
 
-<User TODO>
+<User {{ irc_nick }}>
 	Admin = true
 	Allow = *
-	AltNick = TODO_
+	AltNick = {{ irc_nick }}_
 	AppendTimestamp = false
 	AutoClearChanBuffer = true
 	Buffer = 5000
 	ChanModes = +stn
 	DenyLoadMod = false
 	DenySetBindHost = false
-	Ident = TODO
+	Ident = {{ irc_ident }}
 	JoinTries = 10
 	LoadModule = controlpanel
 	LoadModule = perform
 	LoadModule = clientnotify
 	MaxNetworks = 1
 	MultiClients = true
-	Nick = TODO
+	Nick = {{ irc_nick }}
 	PrependTimestamp = true
-	QuitMsg = TODO
-	RealName = TODO
+	QuitMsg = {{ irc_quitmsg }}
+	RealName = {{ irc_realname }}
 	TimestampFormat = [%H:%M:%S]
 
 	<Network freenode>
 		Server = chat.freenode.net 6665
 	</Network>
 
-	<Pass password>
-		Hash = TODO
-		Method = SHA256
-		Salt = TODO
-	</Pass>
+	Pass = {{ irc_password_hash }}
 </User>

vars/defaults.yml

 
 # ircbouncer
 znc_version: 1.0
+# irc_nick: TODO
+# irc_ident: TODO
+# irc_realname: TODO
+# irc_quitmsg: TODO
+# irc_password_hash: TODO
 
 # # mailserver
 # mail_server_hostname: mail.TODO.com

vars/user.yml

 
 # # ircbouncer
 # znc_version: 1.0
+# irc_nick: TODO
+# irc_ident: TODO
+# irc_realname: TODO
+# irc_quitmsg: TODO
+# irc_password_hash: TODO
 
 # # mailserver
 # mail_server_hostname: mail.TODO.com