---
- name: Change root password
  ansible.builtin.user:
    name: root
    password: "{{ lxc_password | password_hash('sha512') }}"
    update_password: always
  when: lxc_password is defined

- name: Change admin password
  ansible.builtin.user:
    name: admin
    password: "{{ password | password_hash('sha512') }}"
    update_password: always
  when: password is defined

- name: Regenerate SSH host keys
  ansible.builtin.include_role:
    name: system_setup
    tasks_from: ssh
  vars:
    regenerate_ssh_keys: true

- name: Remove previous entry from known hosts
  ansible.builtin.known_hosts:
    name: "{{ hostvars[lxc_hostname]['ansible_host'] }}"
    state: absent
  delegate_to: localhost