Reorder ssh keygen to avoid issues of starting ssh before keys existing

1 files changed, 15 insertions, 15 deletions

diff --git a/roles/ssh/tasks/main.yml b/roles/ssh/tasks/main.yml
index 9fc0f51d..15eca2cc 100644
--- a/roles/ssh/tasks/main.yml
+++ b/roles/ssh/tasks/main.yml
@@ -8,21 +8,6 @@
     name: "{{ ssh_package }}"
     state: "present"
 
-- name: "Ensure ssh service is enabled"
-  become: true
-  ansible.builtin.service:
-    name: "{{ ssh_service }}"
-    state: "started"
-    enabled: true
-  when: not ansible_facts['is_chroot']
-
-- name: "(chroot): Ensure ssh service is enabled"
-  # noqa: command-instead-of-module intentional isnide chroot
-  ansible.builtin.command:
-    cmd: "systemctl enable {{ ssh_service }}"
-  when: ansible_facts['is_chroot']
-  changed_when: true
-
 - name: "Generate /etc/ssh/ RSA host key"
   become: true
   ansible.builtin.command:
@@ -41,6 +26,21 @@
     cmd: "ssh-keygen -q -t ed25519 -f /etc/ssh/ssh_host_ed25519_key -C '' -N ''"
     creates: "/etc/ssh/ssh_host_ed25519_key"
 
+- name: "Ensure ssh service is enabled"
+  become: true
+  ansible.builtin.service:
+    name: "{{ ssh_service }}"
+    state: "started"
+    enabled: true
+  when: not ansible_facts['is_chroot']
+
+- name: "(chroot): Ensure ssh service is enabled"
+  # noqa: command-instead-of-module intentional isnide chroot
+  ansible.builtin.command:
+    cmd: "systemctl enable {{ ssh_service }}"
+  when: ansible_facts['is_chroot']
+  changed_when: true
+
 - name: "Configure sshd_config"
   become: true
   ansible.builtin.copy: