update

config.yml

@@ -56,9 +56,7 @@
         mode: '0644'
 
     - name: Root password
-      user:
+      ansible.builtin.import_tasks: tasks/rootpass.yml
-        name: root
-        password: "$6$OJEdzUbqfQR72WjX$SFMnDZ0MXM7JfYKPvvN0nJIPetzrWQw/0q360xgR9mwJVwrme4dt9hhtH95yytn8Ln0.0koVCno6vskylJFm5."
 
     # - name: Disable SELinux
     #   ansible.builtin.selinux:

group_vars/all.yml

@@ -30,6 +30,8 @@ common_packages:
   - wget
   - xfsprogs
 
+root_password_hash: "$6$OJEdzUbqfQR72WjX$SFMnDZ0MXM7JfYKPvvN0nJIPetzrWQw/0q360xgR9mwJVwrme4dt9hhtH95yytn8Ln0.0koVCno6vskylJFm5."
+
 proxmox_packages:
   - unattended-upgrades
   - borgmatic

tasks/rootpass.yml

@@ -0,0 +1,5 @@
+---
+- name: Root password
+  ansible.builtin.user:
+    name: root
+    password: "{{ root_password_hash }}"