[Unit]
Description=Import hcloud root ssh keys
Requires=hcloud-dl-metadata.service
After=hcloud-dl-metadata.service
ConditionPathExists=!/root/.ssh/authorized_keys

[Service]
Type=oneshot
DynamicUser=yes
ExecStart=/usr/bin/jq -r '.ssh_keys|join("\n")' /etc/hcloud-metadata.json
StandardOutput=truncate:/home/ansible/.ssh/authorized_keys

[Install]
WantedBy=multi-user.target