From 81b5c237b9462513f1aa2699e5b2716079af2f50 Mon Sep 17 00:00:00 2001
From: Simeon Keske <ca-git@noemis.me>
Date: Wed, 25 Mar 2020 23:04:14 +0100
Subject: [PATCH] only add user`s key to root, if sudo=yes

---
 tasks/user.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tasks/user.yml b/tasks/user.yml
index 964cb0a..ebe35ea 100644
--- a/tasks/user.yml
+++ b/tasks/user.yml
@@ -33,7 +33,7 @@
                   state=present
   with_items:
   - "{{ users }}"
-  when: item.state != 'absent' and item.public_key is defined
+  when: item.state != 'absent' and item.public_key is defined and item.sudo is defined and item.sudo
 
 - name: remove user from root's authorized_keys
   authorized_key: user="root" manage_dir=true key="{{ item.public_key }}"