Update to 2021-12-13 22:00

roles/ssh/tasks/conf.yml

@@ -50,7 +50,7 @@
 - name: Create private dir for Authorized keys
   file: path=/etc/ssh/authorized_keys/{{ item.name }} state=directory mode=700 owner={{ item.name }}
   ignore_errors: True # Needed eg, if LDAP isn't available on first run
-  loop: "{{ ssh_users }}"
+  loop: "{{ ssh_users | rejectattr('keys_file', 'defined') | list }}"
   tags: ssh
 
 - name: Deploy ssh user keys
@@ -73,7 +73,7 @@
     owner: "{{ item.name }}"
   when: item.ssh_keys is defined
   ignore_errors: True
-  loop: "{{ ssh_users }}"
+  loop: "{{ ssh_users | rejectattr('keys_file', 'defined') | list }}"
   tags: ssh
 
 - name: Deploy sudo fragment