Ansible role for SSH Key Rotation

An Ansible role that rotates SSH keys on remote servers. By default, the role generates an ed25519 key pair. The current date and Ansible group name are used as the name and comment of the key pair.

Example Playbook

---
- name: SSH Keys Rotation
  hosts: all
  remote_user: user
  vars:
    is_exclusive: yes
    ssh_host_user: user
    ssh_key_path: ".ssh/{{ group_names[0] }}-{{ansible_date_time.date}}"
    ssh_key_comment: "{{ group_names[0] }}-{{ansible_date_time.date}}"
  vars_prompt:
    - name: passphrase
      prompt: "Enter the passphrase"
      private: true
    - name: confirm_passphrase
      prompt: "Confirm the passphrase"
      private: true
  roles:
    - ssh-key-rotation

Credits

This role is forked from nyambati/ssh-key-rotation by Thomas Nyambati.