ssh-certs hosts.

playbooks/ssh-certs/deploy-host-certs.yml

@@ -53,6 +53,14 @@
         group: root
         mode: '0640' # Сертификат может быть 0640
 
+    - name: Add SSH Host CA to global known_hosts
+      known_hosts:
+        path: /etc/ssh/ssh_known_hosts
+        name: "*.guaranteedstruggle.host"
+        key: "@cert-authority *.guaranteedstruggle.host,192.168.0.* ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINBFlDSADidBfwn3aDJiZM6Yg14bTjDTY6FxNsnBmT2B"
+        state: present
+      become: true 
+
     - name: Configure SSH HostKeys for Proxmox compatibility
       blockinfile:
         path: /etc/ssh/sshd_config  # Или укажите путь к дроп-ину в sshd_config.d/, если используете их