ansible-experiments/add-users-groups-authorized_keys-dot-files/roles/users/tasks/ssh_config.yml

- name: Ensure .ssh folder is created | Debian/Ubuntu systems
  file:
    path: "/home/{{item.name}}/.ssh"
    state: directory
    mode: 0700
    owner: "{{ item.name }}"
    group: "{{ item.name }}"
  with_items:
    - "{{ users }}"
  when: item.state == "present" and item.name != 'ec2-user' and ansible_os_family == 'Debian'


- name: Configure authorized_keys | Debian/Ubuntu systems
  authorized_key:
    user: "{{ item.0.name }}"
    key: "{{ lookup('file', 'keys/' + item.0.name + '/' + item.1.file + '.pub') }}"
    state: "{{ item.1.state | default('present') }}"
  with_subelements:
    - "{{ users }}"
    -  keys
  when: item.0.state is defined and item.0.state == "present" and item.0.name != 'ec2-user' and ansible_os_family == 'Debian'

- name: Ensure .ssh folder is created | FreeBSD systems
  file:
    path: "/home/{{item.name}}/.ssh"
    state: directory
    mode: 0700
    owner: "{{ item.name }}"
    group: "{{ item.name }}"
  with_items:
    - "{{ users }}"
  when: item.state == "present" and item.name != 'ubuntu' and ansible_os_family == 'FreeBSD'


- name: Configure authorized_keys | FreeBSD systems
  authorized_key:
    user: "{{ item.0.name }}"
    key: "{{ lookup('file', 'keys/' + item.0.name + '/' + item.1.file + '.pub') }}"
    state: "{{ item.1.state | default('present') }}"
  with_subelements:
    - "{{ users }}"
    -  keys
  when: item.0.state is defined and item.0.state == "present" and item.0.name != 'ubuntu' and ansible_os_family == 'FreeBSD'