From e72d9aac705d5bbd74a286dcad548ffe667da162 Mon Sep 17 00:00:00 2001
From: Christoph <ckubu@oopen.de>
Date: Wed, 29 Jul 2026 17:46:31 +0200
Subject: [PATCH] fix(users.yml): replace deprecated 'authorized_key' with
 'ansible.posix.authorized_key' for improved compatibility

---
 roles/common/tasks/users.yml | 23 +++++++++++++----------
 1 file changed, 13 insertions(+), 10 deletions(-)

diff --git a/roles/common/tasks/users.yml b/roles/common/tasks/users.yml
index 963656a..2016aed 100644
--- a/roles/common/tasks/users.yml
+++ b/roles/common/tasks/users.yml
@@ -59,7 +59,7 @@
     - users-exists
 
 - name: (users.yml) Ensure authorized_key files for default users are present
-  authorized_key:
+  ansible.posix.authorized_key:
     user: "{{ item.0.name }}"
     key: "{{ item.1 }}"
     state: present
@@ -106,7 +106,7 @@
     - users-exists
 
 - name: (users.yml) Ensure authorized_key files for extra users are present
-  authorized_key:
+  ansible.posix.authorized_key:
     user: "{{ item.0.name }}"
     key: "{{ item.1 }}"
     state: present
@@ -120,7 +120,7 @@
     - authorized_key
 
 - name: (users.yml) other entries authorized_key files
-  authorized_key:
+  ansible.posix.authorized_key:
     user: "{{ item.user }}"
     key: "{{ item.key }}"
     state: present
@@ -168,7 +168,7 @@
 # - Take care backup host has rsa key to connect via ssh to the other hosts
 # ---
 
-#- name: (users.yml) Copy ssh rsa private key to user root on backup server
+# - name: (users.yml) Copy ssh rsa private key to user root on backup server
 #  copy:
 #    src: '{{ item.priv_key_src }}'
 #    dest: '{{ item.priv_key_dest }}'
@@ -178,7 +178,7 @@
 #  loop: "{{ ssh_keypair_backup_server }}"
 #  loop_control:
 #    label: '{{ item.priv_key_dest }}'
-#  when: 
+#  when:
 #    - insert_ssh_keypair_backup_server|bool
 #    - ssh_keypair_backup_server is defined
 #    - ssh_keypair_backup_server|length > 0
@@ -187,7 +187,7 @@
 #    - keypair-backup-server
 #
 #
-#- name: (users.yml) Copy ssh rsa public key to user root on backup server
+# - name: (users.yml) Copy ssh rsa public key to user root on backup server
 #  copy:
 #    src: '{{ item.pub_key_src }}'
 #    dest: '{{ item.pub_key_dest }}'
@@ -203,10 +203,10 @@
 #    - ssh_keypair_backup_server|length > 0
 #  tags:
 #    - insert-ssh-keypair-backup-server
-#- keypair-backup-server
+# - keypair-backup-server
 #
 #
-#- name: (users.yml) Ensure user back has public rsa key of backup server
+# - name: (users.yml) Ensure user back has public rsa key of backup server
 #  authorized_key:
 #    user: "{{ item.backup_user }}"
 #    key: "{{ lookup('file', item.pub_key_src) }}"
@@ -214,7 +214,7 @@
 #  loop: "{{ ssh_keypair_backup_server }}"
 #  loop_control:
 #    label: 'authorized_keys - user: {{ item.backup_user }}'
-#  when: 
+#  when:
 #    - ssh_keypair_backup_server is defined
 #    - ssh_keypair_backup_server|length > 0
 #  tags:
@@ -229,6 +229,9 @@
   ansible.builtin.file:
     path: /root/.ssh
     state: directory
+    owner: root
+    group: root
+    mode: "0700"
 
 - name: (users.yml) Copy (backup) ed25519 ssh private key to user root
   ansible.builtin.copy:
@@ -265,7 +268,7 @@
     - insert_ssh_keypair_backup_server
 
 - name: (users.yml) Ensure authorized_key (root) on backup hosts contains public key
-  authorized_key:
+  ansible.posix.authorized_key:
     user: root
     key: "{{ lookup('file', item.pub_key_src) }}"
     state: present