# Alliance Boréale - Rôle Common - SSH Configuration
# Date: 2025-10-31

---
- name: "📦 Ensure OpenSSH server is installed"
  ansible.builtin.apt:
    name: openssh-server
    state: present

- name: "⚙️ Configure SSH daemon"
  ansible.builtin.template:
    src: sshd_config.j2
    dest: /etc/ssh/sshd_config
    owner: root
    group: root
    mode: '0644'
    validate: '/usr/sbin/sshd -t -f %s'
  notify: restart sshd

- name: "🔑 Add authorized keys for ansible user"
  ansible.posix.authorized_key:
    user: "{{ users.ansible.name }}"
    key: "{{ item }}"
    state: present
  loop: "{{ ssh.authorized_keys }}"
  when: ssh.authorized_keys is defined

- name: "✅ Start and enable SSH"
  ansible.builtin.systemd:
    name: sshd
    state: started
    enabled: true