---
- name: Synchronize Host Passwords
  hosts: all
  become: yes
  tasks:
    - name: Ensure root password is set from Vault
      ansible.builtin.user:
        name: root
        # This takes the text from your vault and hashes it on your Mac
        password: "{{ vault_root_password | password_hash('sha512') }}"
        shell: /bin/bash

    - name: Ensure volker password is set from Vault
      ansible.builtin.user:
        name: volker
        password: "{{ vault_root_password | password_hash('sha512') }}"
        shell: /bin/bash
        groups: sudo
        append: yes