From aa8d8855e0a153245f2ad0832ebeea80af57cbfb Mon Sep 17 00:00:00 2001
From: Ahmed Abdelhalim <pm@a14m.dev>
Date: Sun, 9 Nov 2025 00:46:18 +0100
Subject: Refactor scattered known_hosts to be part of the ssh role

---
 roles/ssh/tasks/main.yml | 9 +++++++++
 1 file changed, 9 insertions(+)

(limited to 'roles/ssh/tasks')

diff --git a/roles/ssh/tasks/main.yml b/roles/ssh/tasks/main.yml
index 9728e303..76ba7aa5 100644
--- a/roles/ssh/tasks/main.yml
+++ b/roles/ssh/tasks/main.yml
@@ -94,3 +94,12 @@
       AllowUsers {{ username }}
   notify:
     - "Restart ssh"
+
+- name: "Configure known_hosts"
+  ansible.builtin.known_hosts:
+    name: "{{ item.split(' ') | first }}"
+    key: "{{ item }}"
+    path: "{{ ansible_env.HOME }}/.ssh/known_hosts"
+    state: present
+  loop: "{{ ssh_known_hosts }}"
+  when: ssh_known_hosts is defined and ssh_known_hosts | length > 0
-- 
cgit v1.2.3