Merge branch 'main' of gitlab.com-perso:cdesiles/ansible-playbooks

roles/sshd/tasks/main.yml

@@ -51,16 +51,13 @@
         mode: "0755"
 
     - name: Backup authorized_keys out of HOME dir (if unavailable at startup)
-      ansible.builtin.command: "cp /home/{{ item }}/.ssh/authorized_keys {{ ssh_authorized_keys_fallback_dir }}/{{ item }}"
+      ansible.builtin.copy:
-      loop: "{{ ssh_users.split() }}"
+        src: "/home/{{ item }}/.ssh/authorized_keys"
-      changed_when: false
+        dest: "{{ ssh_authorized_keys_fallback_dir }}/{{ item }}"
-
+        remote_src: true
-    - name: Fix ownership
+        owner: root
-      ansible.builtin.file:
+        group: root
-        path: "{{ ssh_authorized_keys_fallback_dir }}/{{ item }}"
+        mode: "0644"
-        owner: "{{ item }}"
-        group: "{{ item }}"
-        mode: "0600"
       loop: "{{ ssh_users.split() }}"
 
 - name: Remove motd on Debian