Add SSH key and encrypt group_vars/all

* Add the SSH key as a variable
* Encrypt the file containing this variable

group_vars/all

@@ -39,17 +39,8 @@ desktop_software:
   - perl-Clipboard
   - perl-Capture-Tiny
 
-ipaserver: las101.las.kit.edu
-ipaserver2: las126.las.kit.edu
-
-sudoer:
-  - bernhard
-  - gethmann
-
-userinstall_vars:
-        - {name: "gethmann", password: "$6$HEmrpe9IMPI7nwxK$7VyjN.1tf/bJ2JJUeXQa.HEK3PFB1ggUVqpvMD0M/b/Ln.8QkzSMit9xukPaNhVg4caTnQBmcn1DXVwbfCmJt."}
-        - {name: "bernhard", password: "$6$Q9NiWWvweGVfXXUP$6jhQWNGEs1f/RZc2aeDJ4Wv7huT5eAyW/uO0hOr8Yzi.h5Sa149LDpzp6utQI2VbnKF6O7TfpZeoKHFaNKGY51"}
-
-admin_mail: gethmann@kit.edu
+ipaserver: las126.las.kit.edu
+ipaserver2: las100.las.kit.edu
+ipaserver3: las101.las.kit.edu
 
 ansible_server: las126.las.kit.edu

roles/common/tasks/sshd.yml

@@ -58,8 +58,9 @@
   authorized_key:
     user: root
     state: present
-    key: "{{ lookup('file', '/root/.ssh/id_rsa.pub') }}"
-    key_options: 'from={{ ansible_server }}'
+    key: "{{ rootkey }}"
+    key_options: 'from="{{ ansible_server }}"'
+  notify: restart sshd
 
 - name: Enable tunnel
   lineinfile: