a few things

ansible/infra/01_user_and_access_setup_playbook.yml

@@ -29,7 +29,7 @@
 
     - name: Copy current user's authorized_keys to new user
       copy:
-        src: "/home/{{ ansible_user }}/.ssh/authorized_keys"
+        src: "{{ (ansible_user == 'root') | ternary('/root/.ssh/authorized_keys', '/home/' + ansible_user + '/.ssh/authorized_keys') }}"
         dest: "/home/{{ new_user }}/.ssh/authorized_keys"
         owner: "{{ new_user }}"
         group: "{{ new_user }}"
@@ -58,8 +58,15 @@
             line: "PasswordAuthentication no",
           }
 
+    - name: Ensure PasswordAuthentication is set to no in cloud-init config
+      lineinfile:
+        path: /etc/ssh/sshd_config.d/50-cloud-init.conf
+        regexp: "^PasswordAuthentication"
+        line: "PasswordAuthentication no"
+        create: yes
+        backup: yes
+
     - name: Restart SSH
       service:
         name: ssh
         state: restarted
-