---
- name: Over ze deploy_ssh_public_keys je nastaveno
  ansible.builtin.assert:
    that:
      - deploy_ssh_public_keys is defined
      - deploy_ssh_public_keys | length > 0
    fail_msg: "deploy_ssh_public_keys neni nastaven. Pridej ho do group_vars/all.yml nebo inventory."

- name: Nastav authorized_keys pro deploy uzivatele
  ansible.posix.authorized_key:
    user: "{{ deploy_user }}"
    state: present
    key: "{{ item }}"
    exclusive: false  # neprepisuj existujici klice
  loop: "{{ deploy_ssh_public_keys }}"
  when: deploy_ssh_public_keys | length > 0

- name: Nastav spravna opravneni na authorized_keys
  ansible.builtin.file:
    path: "{{ ssh_key_path }}"
    owner: "{{ ssh_key_owner }}"
    group: "{{ ssh_key_group }}"
    mode: "{{ ssh_key_mode }}"