---
- name: Create datadirectories
  ansible.builtin.file:
    path: "{{ item }}"
    state: directory
    mode: "0755"
    owner: root
    group: "{{ ansible_wheel }}"
  with_items:
    - /export/sshca
    - /export/sshca/pubkeys

- name: Create CA directory
  ansible.builtin.file:
    path: "/export/ssh/ca"
    state: directory
    mode: "0700"
    owner: root
    group: "{{ ansible_wheel }}"

- name: Link datadirectory
  ansible.builtin.file:
    dest: /srv/sshca
    src: /export/sshca
    state: link
    owner: root
    group: "{{ ansible_wheel }}"
    follow: false

- name: Copy signing script
  ansible.builtin.copy:
    dest: /srv/sshca/signcert.sh
    src: signcert.sh
    mode: "0755"
    owner: root
    group: "{{ ansible_wheel }}"