diff --git a/tasks/main.yml b/tasks/main.yml
index 196bb8e..c93563e 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -150,5 +150,89 @@
     - 'ensure_mariadb.service_restart'
 - name: 'flush handlers'
   meta: 'flush_handlers'
+- name: 'ensure mariadb databases'
+  when:
+    - mariadb_db_list is defined
+    - mariadb_db_list is iterable
+  community.mysql.mysql_db:
+    ca_cert: '{{ item.ca_cert | default(OMIT) }}'
+    chdir: '{{ item.chdir | default(OMIT) }}'
+    check_hostname: '{{ item.check_hostname | default(OMIT) }}'
+    check_implicit_admin: '{{ item.check_implicit_admin | default(OMIT) }}'
+    client_cert: '{{ item.client_cert | default(OMIT) }}'
+    client_key: '{{ item.client_key | default(OMIT) }}'
+    collation: '{{ item.collation | default(OMIT) }}'
+    config_file: '{{ item.config_file | default(OMIT) }}'
+    config_overrides_defaults: '{{ item.config_overrides_defaults | default(OMIT) }}'
+    connect_timeout: '{{ item.connect_timeout | default(OMIT) }}'
+    dump_extra_args: '{{ item.dump_extra_args | default(OMIT) }}'
+    encoding: '{{ item.encoding | default(OMIT) }}'
+    force: '{{ item.force | default(OMIT) }}'
+    hex_blob: '{{ item.hex_blob | default(OMIT) }}'
+    ignore_tables: '{{ item.ignore_tables | default(OMIT) }}'
+    login_host: '{{ item.login_host | default(OMIT) }}'
+    login_password: '{{ item.login_password | default(OMIT) }}'
+    login_port: '{{ item.login_port | default(OMIT) }}'
+    login_unix_socket: '{{ item.login_unix_socket | default(OMIT) }}'
+    login_user: '{{ item.login_user | default(OMIT) }}'
+    master_data: '{{ item.master_data | default(OMIT) }}'
+    name: '{{ item.name }}'
+    pipefail: '{{ item.pipefail | default(OMIT) }}'
+    quick: '{{ item.quick | default(OMIT) }}'
+    restrict_config_file: '{{ item.restrict_config_file | default(OMIT) }}'
+    single_transaction: '{{ item.single_transaction | default(OMIT) }}'
+    skip_lock_tables: '{{ item.skip_lock_tables | default(OMIT) }}'
+    sql_log_bin: '{{ item.sql_log_bin | default(OMIT) }}'
+    state: '{{ item.state }}'
+    target: '{{ item.target | default(OMIT) }}'
+    unsafe_login_password: '{{ item.unsafe_login_password | default(OMIT) }}'
+    use_shell: '{{ item.use_shell | default(OMIT) }}'
+  loop: '{{ mariadb_db_list }}'
+  loop_control:
+    label: '{{ item.name }} will be {{ item.state }}'
+- name: 'ensure mariadb users'
+  when:
+    - mariadb_db_list is defined
+    - mariadb_db_list is iterable
+  community.mysql.mysql_user:
+    append_privs: '{{ item.append_privs | default(OMIT) }}'
+    attributes: '{{ item.attributes | default(OMIT) }}'
+    ca_cert: '{{ item.ca_cert | default(OMIT) }}'
+    check_hostname: '{{ item.check_hostname | default(OMIT) }}'
+    check_implicit_admin: '{{ item.check_implicit_admin | default(OMIT) }}'
+    client_cert: '{{ item.client_cert | default(OMIT) }}'
+    client_key: '{{ item.client_key | default(OMIT) }}'
+    column_case_sensitive: '{{ item.column_case_sensitive | default(OMIT) }}'
+    config_file: '{{ item.config_file | default(OMIT) }}'
+    connect_timeout: '{{ item.connect_timeout | default(OMIT) }}'
+    encrypted: '{{ item.encrypted | default(OMIT) }}'
+    force_context: '{{ item.force_context | default(OMIT) }}'
+    host: '{{ item.host | default(OMIT) }}'
+    host_all: '{{ item.host_all | default(OMIT) }}'
+    locked: '{{ item.locked | default(OMIT) }}'
+    login_host: '{{ item.login_host | default(OMIT) }}'
+    login_password: '{{ item.login_password | default(OMIT) }}'
+    login_port: '{{ item.login_port | default(OMIT) }}'
+    login_unix_socket: '{{ item.login_unix_socket | default(OMIT) }}'
+    login_user: '{{ item.login_user | default(OMIT) }}'
+    name: '{{ item.name }}'
+    password: '{{ item.password | default(OMIT) }}'
+    password_expire: '{{ item.password_expire | default(OMIT) }}'
+    password_expire_interval: '{{ item.password_expire_interval | default(OMIT) }}'
+    plugin: '{{ item.plugin | default(OMIT) }}'
+    plugin_auth_string: '{{ item.plugin_auth_string | default(OMIT) }}'
+    plugin_hash_string: '{{ item.plugin_hash_string | default(OMIT) }}'
+    priv: '{{ item.priv | default(OMIT) }}'
+    resource_limits: '{{ item.resource_limits | default(OMIT) }}'
+    salt: '{{ item.salt | default(OMIT) }}'
+    session_vars: '{{ item.session_vars | default(OMIT) }}'
+    sql_log_bin: '{{ item.sql_log_bin | default(OMIT) }}'
+    state: '{{ item.state }}'
+    subtract_privs: '{{ item.subtract_privs | default(OMIT) }}'
+    tls_requires: '{{ item.tls_requires | default(OMIT) }}'
+    update_password: '{{ item.update_password | default(OMIT) }}'
+  loop: '{{ mariadb_db_list }}'
+  loop_control:
+    label: '{{ item.name }} will be {{ item.state }}'
 ...