---

- name: Set default password
  ansible.builtin.set_fact:
    lxc_root_password: "test-guest"

- name: Prompt for password
  ansible.builtin.pause:
    prompt: "Enter your password [{{ lxc_root_password }}]"
    echo: false
  register: password_result_1

- name: Prompt for password confirmation (only if a password was entered)
  ansible.builtin.pause:
    prompt: "Confirm your new password"
    echo: false
  register: password_result_2
  when: password_result_1.user_input | length > 0

- name: Ensure passwords match
  ansible.builtin.assert:
    that:
      - password_result_1.user_input == password_result_2.user_input
    fail_msg: "Passwords do not match!"
    success_msg: "Password confirmed."
  when: password_result_1.user_input | length > 0

- name: Use user input only if provided, otherwise keep the default
  ansible.builtin.set_fact:
    lxc_root_password: "{{ password_result_1.user_input }}"
  when: password_result_1.user_input | length > 0