- name: Set up authorized_keys file for root
  file:
    path: /root/.ssh
    state: directory
    mode: '0700'
    owner: root
    group: root

- name: Ensure authorized_keys keys
  copy:
    dest: /root/.ssh/authorized_keys
    content: "{{ vars.ssh_keys | join('\n') }}"
    owner: root
    group: root
    mode: '0600'