- name: deploy SSH private key on Ansible controller
  hosts: localhost
  vars_files:
    - vars/main.yml
  gather_facts: false
  tasks:
    - name: Retrieve secrets
      ansible.builtin.include_tasks:
        file: "tasks/retrieve_secret_vars.yml"

    - name: Deploy SSH private key
      copy:
        src: "{{ PRIVATE_KEY_FILE }}"
        dest: "{{ ansible_user_dir }}/.ssh/"
        mode: 0600