now using ansible builtin stuff to manage sshd

tasks/keys.yml

@@ -1,42 +1,30 @@
 ---
 - name: Generate new ssh host key pair if necessary
-  become: yes
+  become: true
-  command: ssh-keygen -t ecdsa -f 'ssh_host_{{ item }}_key' -P '' -q
+  community.crypto.openssh_keypair:
-  args:
+    path: "/etc/ssh/ssh_host_{{ item }}_key"
-    chdir: '/etc/ssh/'
+    type: "{{ item }}"
-    creates: 'ssh_host_{{ item }}_key.pub'
-  notify:
-    - systemctl restart ssh
   with_items: "{{ sshd__key_types }}"
   when:
     - sshd__manage_key_types | bool
-
-- name: Remove unwanted host keys
-  become: yes
-  file:
-    path: '/etc/ssh/ssh_host_{{ item }}_key'
-    state: absent
-  with_items:
-    - rsa
-    - dsa
   notify:
     - systemctl restart ssh
 
-- name: make sure the correct keys are available
+- name: make sure only the correct keys are available
-  file:
+  ansible.builtin.file:
     path: '/etc/ssh/ssh_host_{{ item }}_key'
     state: absent
-  become: yes
+  become: true
   with_items:
     - "{{ sshd__key_types_list | difference( sshd__key_types ) }}"
   notify:
     - systemctl restart ssh
 
-- name: make sure the correct pubkeys are available
+- name: make sure only the correct pubkeys are available
-  file:
+  ansible.builtin.file:
     path: '/etc/ssh/ssh_host_{{ item }}_key.pub'
     state: absent
-  become: yes
+  become: true
   with_items:
     - "{{ sshd__key_types_list | difference( sshd__key_types ) }}"
   notify:

vars/main.yml

@@ -1,3 +1,3 @@
 ---
-playbook_version_number: 4099 # should be over ninethousand
+playbook_version_number: 4100  # should be over ninethousand
 playbook_version_path: 'role-sshd_chaos-bodensee_github.com.version'