---
# Phase 1: Add new key alongside old keys
- name: Add new SSH key to all hosts
  hosts: all
  become: true
  vars:
    new_key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBuZvobGuzkiukW9urE7ub2v9O2zri9QhvWUZocOVxN0 sascha@pfannkuchen-2026"
  tasks:
    - name: Set target user
      set_fact:
        target_user: "{{ base_user | default(ansible_user | default('sascha')) }}"

    - name: Add new key (keep old keys)
      ansible.posix.authorized_key:
        user: "{{ target_user }}"
        key: "{{ new_key }}"
        state: present